GB/T 40640.2-2021Informationalized management of chemicals—Part 2: Information security (English PDF)

Foreword

This document is in accordance with the provisions of GB/T 1.1-2020 "Guidelines for Standardization Work Part 1: Structure and Drafting Rules of Standardization Documents" Drafting.

This document is the second part of GB/T 40640 "Chemical Management Informationization". GB/T 40640 "Chemical Management Informationization" has been issued The following parts are distributed.

---Part 1: Data Exchange;

---Part 2: Information Security;

---Part 3: Electronic label application;

---Part 4: General specification for chemical positioning system;

---Part 5: Chemical Data Center.

Introduction

Informatization is an important means to realize the modernization of chemical management. With the development of Internet of Things and big data application technology, modern information technology The application of technology provides technical support for improving management efficiency, promoting information sharing, eliminating management blind spots, and effectively curbing chemical accidents.

In this regard, my country has established a national standard system for chemical management informatization.

In this standard system, GB/T 40640 "Chemical Management Informationization" is to regulate the relevant institutions in my country to engage in the chemical management information system.

The method and basis for the construction and development activities of the system are proposed to be composed of five parts. The purpose is to establish the implementation of chemical management information data exchange and maintenance. Information security, electronic label application, positioning system application and methods and basis for chemical data center construction.

---Part 1: Data Exchange;

---Part 2: Information Security;

---Part 3: Electronic label application;

---Part 4: General specification for chemical positioning system;

---Part 5: Chemical Data Center.

This document is the second part of GB/T 40640 "Chemical Management Informationization". Information security is the basis for realizing management informatization, effective Information security management can improve the privacy, authenticity, integrity, and availability of the information management system, and avoid the continuity of system services. Health adverse effects. This formulation provides detailed regulations on information security requirements related to chemical management informatization to better regulate and Promote the related construction of chemical management information system.

1 Scope

This document specifies the basic and technical requirements for information security of chemical management information.

This document is applicable to the information security management of chemical management informatization.

2 Normative references

The content of the following documents constitutes an indispensable clause of this document through normative references in the text. Among them, dated quotations Only the version corresponding to the date is applicable to this document; for undated reference documents, the latest version (including all amendments) is applicable to this document.

GB/T 2887 General Specification for Computer Site

GB/T 5271.8 Information Technology Vocabulary Part 8: Security

GB 17859 Classification criteria for security protection grades of computer information systems

GB/T 20269 Information Security Technology Information System Security Management Requirements

GB/T 20270 Information Security Technology Network Basic Security Technical Requirements

GB/T 21052 Information Security Technology Information System Physical Security Technical Requirements

GB/T 22080 Information Technology Security Technical Information Security Management System Requirements

GB/T 22240 Information Security Technology Network Security Grade Protection Classification Guide

GB/T 30283 Information Security Technology Information Security Service Classification

3 Terms and definitions

The following terms and definitions defined in GB/T 5271.8 and GB 17859 apply to this document.

4 Basic requirements