Valid

GB/T 38249-2019Information security technology—Security guide of cloud computing services for government website (English PDF)

信息安全技术 政府网站云计算服务安全指南

Preview PDF

This is a limited preview

Buy now to download the full PDF (15 pages)

Need quotation for your management?

Get a formal quotation for GB/T 38249-2019 in 30 minutes.

Issued by

SAMR; SAC

Level / Type

National · Recommended

Issue date

October 18, 2019

Implementation date

May 1, 2020

Scope

GB/T 38249-2019 is the English-translated version of 信息安全技术 政府网站云计算服务安全指南.

GB/T 38249-2019 is the Chinese standard "Information security technology—Security guide of cloud computing services for government website".

Its scope clause reads: This standard gives the government website the process of adopting cloud computing services, in the stages of planning preparation, deployment migration, operation management, and service exit.

Safety technical measures and safety management measures. This standard is applicable to the construction and operation guidance for government websites that use cloud computing services, especially socialized cloud computing services. Its clauses include terms and definitions; overview.

Found what you need?

Document preview — GB/T 38249-2019

National Standard of the People's Republic of China

ICS
35.040
Classification
L 80

Issued by: State Administration for Market Regulation; Standardization Administration of the PRC

Contents

  • Foreword
  • Introduction
  • 1 Scope
  • 2 Normative references
  • 3 Terms and Definitions
  • 4 Overview
  • 4.1 Security Role
  • 4.2 Cloud Computing Service Lifecycle
  • 5 Planning Preparation
  • 5.1 Overview
  • 5.2 Security Responsibilities
  • 5.3 Demand Analysis
  • 5.4 Service provider selection
  • 5.5 Contract Signing
  • 5.6 Cloud Migration Solution
  • 6 Deployment Migration
  • 6.1 Overview
  • 6.2 Security Responsibilities
  • 6.3 Cloud Migration Implementation
  • 6.4 Cloud Migration Delivery
  • 7 Operation Management
  • 7.1 Overview
  • 7.2 Security Responsibilities
  • 7.3 Security
  • 7.4 Safety Monitoring
  • 7.5 Emergency response
  • 7.6 Evaluation Improvement
  • 8 service exit
  • 8.1 Overview
  • 8.2 Security responsibilities
  • 8.3 Service Exit Security

1 Scope

This standard gives the government website the process of adopting cloud computing services, in the stages of planning preparation, deployment migration, operation management, and service exit.

Safety technical measures and safety management measures.

This standard is applicable to the construction and operation guidance for government websites that use cloud computing services, especially socialized cloud computing services.

2 Normative references

The following documents are indispensable for the application of this document. For dated references, only dated versions apply to this article.

Pieces. For undated references, the latest edition (including all amendments) applies to this document.

GB/T 25069 Information Security Technology Terminology

GB/T 31167 Information Security Technology Cloud Computing Service Security Guide

GB/T 31168 Information Security Technology Cloud Computing Service Security Capability Requirements

GB/T 31506-2015 Information Security Technology Government Portal Website System Security Technical Guide

3 Terms and definitions

The following terms and definitions as defined in GB/T 25069 and GB/T 31167 apply to this document.

3.1 Cloud service agent

Responsible for supporting or facilitating negotiations between cloud service customers and other cloud service providers.

Note. including website developers, system integrators, security service providers, etc.

3.2 Government website

A website established by government agencies to publish government information, provide online services, and conduct interactive exchanges.

Note. Includes pages that provide users with presentation and interaction features, applications that generate and process pages, middleware, and more.

4 Overview

4.1 Security role

The process of cloud service customers purchasing and using cloud computing services, the main roles and relationships of participation are shown in Figure 1.

......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 15 pages — is available in the English PDF.

Referenced standards

Similar standards

How to Download GB/T 38249-2019

  1. 1

    Add to cart

    Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.

  2. 2

    Checkout

    Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).

  3. 3

    Instant delivery (0–9 sec)

    Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.

  4. 4

    Invoice included

    A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.

Related Standards

English PDF
15 pages
Instant delivery (0–9 sec)
Invoice included
View Cart

Secure payment via Stripe

Payments accepted

VisaMastercardAmerican ExpressApple PayGoogle PayStripe

GB/T 38249-2019

$235.00