GB/T 41241-2022Management requirements for cybersecurity of industrial control systems in nuclear power plant (English PDF)
核电厂工业控制系统网络安全管理要求
This is a limited preview
Buy now to download the full PDF (21 pages)
Need quotation for your management?
Get a formal quotation for GB/T 41241-2022 in 30 minutes.
Issued by
SAMR; SAC
Level / Type
National · Recommended
Issue date
March 9, 2022
Implementation date
October 1, 2022
Scope
GB/T 41241-2022 is the English-translated version of 核电厂工业控制系统网络安全管理要求.
GB/T 41241-2022 sets the management requirements for the cybersecurity of the industrial control systems of a nuclear power plant.
It fixes the management requirements - the organisation, the responsibilities, the rules and the training - the technical protection requirements and the requirements on emergency management, that is on detecting an incident, responding to it and recovering from it.
It applies to the cybersecurity activities of every phase of the life cycle of such a system, from design, development and engineering to operation, maintenance and decommissioning, and guides the operators of these systems in improving the protection of their production systems.
Nuclear operators, control system suppliers and regulators use it. Issued on 9 March 2022, it has applied since 1 October 2022.
Found what you need?
Document preview — GB/T 41241-2022
National Standard of the People's Republic of China
- ICS
- 27.120.20
- Classification
- N 18
Issued by: State Administration for Market Regulation; Standardization Administration of the PRC
Contents
- Preface
- Introduction
- 1 Scope
- 2 Normative references
- 3 Terms and Definitions
- 4 Abbreviations
- 5 Nuclear Power Plant Industrial Control System Network Security Management
- 6 Network security technical protection of nuclear power plant industrial control system
- 7 Nuclear Power Plant Industrial Control System Network Security Emergency Management
- Appendix A (Informative) Description of Cybersecurity Rating for Industrial Control System of Nuclear Power Plant
- Reference
Foreword
This document is in accordance with the provisions of GB/T 1.1-2020 "Guidelines for Standardization Work Part 1: Structure and Drafting Rules of Standardization Documents" drafted.
Introduction
In order to improve and standardize the network security protection capability of the industrial control system of nuclear power plants, according to the national network security protection of power monitoring system requirements and regulations, the basic requirements for the security level protection of information systems in the power industry, the nuclear safety guidelines related to the instrumentation and control systems of nuclear power plants, etc.
1 Scope
This document specifies the management, technical protection and emergency management requirements for the cyber security of the industrial control system of the nuclear power plant.
This document applies to all phases of the life cycle of industrial control systems in the field of nuclear power plants (including design, development, engineering implementation, operation and maintenance protection, decommissioning, etc.) network security activities, and it is also suitable for guiding users of the industrial control system of nuclear power plants to improve and improve the network security protection in the production system. system maintenance activities to protect the capability.
2 Normative references
The contents of the following documents constitute essential provisions of this document through normative references in the text. Among them, dated citations documents, only the version corresponding to that date applies to this document; for undated references, the latest edition (including all amendments) applies to this document.
GB/T 22240 Information Security Technology Network Security Graded Protection Grading Guide
GB/T 25058 Implementation Guide for Information Security Technology Network Security Level Protection
GB/T 28448 Information Security Technology Network Security Level Protection Evaluation Requirements
GB/T 28449 Information Security Technology Network Security Level Protection Evaluation Process Guide
3 Terms and Definitions
The following terms and definitions apply to this document.
3.1 Acceptance
A method used to end project implementation in risk assessment activities, mainly organized by the assessed party to check the assessment activities item by item. The acceptance criteria are whether the assessment objectives are met. [Source: GB/T 30976.1-2014, 3.1.4]
3.2 Access control
A means of ensuring that the resources of a data processing system can only be accessed by authorized subjects in an authorized manner. [Source: GB/T 25069-2010, 2.2.1.42]
3.3 Authentication
The act of verifying the purported identity of an entity. [Source: GB/T 33009.1-2016, 3.1.2]
3.4 Availability
Characteristics of data or resources that can be accessed and used by authorized entities as required. [Source: GB/T 20984-2007, 3.3]
......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 21 pages — is available in the English PDF.
Referenced standards
Normative references
- GB/T 22240Information security technology—Classification guide for classified protection of cybersecurity
- GB/T 25058Information security technology—Implementation guide for classified protection of cybersecurity
- GB/T 28448Information security technology —Evaluation requirement for classified protection of cybersecurity
- GB/T 28449Information security technology—Testing and evaluation process guide for classified protection of cybersecurity
Similar standards
How to Download GB/T 41241-2022
- 1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
- 2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
- 3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
- 4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.
Related Standards
GB/T 22240-2020 — Information security technology—Classification guide for classified protection of cybersecurity
GB/T 25058-2019 — Information security technology—Implementation guide for classified protection of cybersecurity
GB/T 28448-2019 — Information security technology —Evaluation requirement for classified protection of cybersecurity
Secure payment via Stripe
Payments accepted
GB/T 41241-2022
$390.00