Valid

GB/T 42446-2023Information security technology—Basic requirements for competence of cybersecurity workforce (English PDF)

信息安全技术网络安全从业人员能力基本要求

Preview PDF

This is a limited preview

Buy now to download the full PDF (20 pages)

Need quotation for your management?

Get a formal quotation for GB/T 42446-2023 in 30 minutes.

Issued by

SAMR; SAC

Level / Type

National · Recommended

Issue date

March 17, 2023

Implementation date

October 1, 2023

Scope

GB/T 42446-2023 is the English-translated version of 信息安全技术网络安全从业人员能力基本要求.

This document establishes a classification of cybersecurity practitioners and specifies the knowledge and the skills required of each category. It therefore describes what a person in a given cybersecurity role is expected to know and to be able to do, rather than how an organisation is to be secured.

The document applies to the employment, training, assessment and management of cybersecurity practitioners by organisations of any kind.

Found what you need?

Document preview — GB/T 42446-2023

National Standard of the People's Republic of China

ICS: 35.030
Classification: L 80

Issued by: State Administration for Market Regulation; Standardization Administration of the PRC

Preface
1 Scope
2 Normative references
3 Terms and Definitions
4 General
4.1 Component elements and their relationship
4.2 Job categories and job roles
4.3 Task
5 General Knowledge and Skill Requirements
5.1 General Knowledge Requirements
5.2 General Skill Requirements
6 Professional Knowledge and Skill Requirements
6.1 Network security management personnel
6.2 Network security construction personnel
6.3 Network Security Operations Personnel
6.4 Network Security Audit and Evaluation Personnel
6.5 Network security scientific research and education personnel
Appendix A (Normative) Network Security Body of Knowledge
Appendix B (Normative) Network Security Skills System
Appendix C (Informative) Knowledge and Skills Required to Perform Job Tasks
APPENDIX D (INFORMATIVE) EXAMPLE OF JOB ROLE CLASSIFICATION17
Appendix E (informative) Mapping relationship between job categories, job roles and national occupations
Reference

Foreword

This document is in accordance with the provisions of GB/T 1.1-2020 "Guidelines for Standardization Work Part 1: Structure and Drafting Rules for Standardization Documents" drafting.

1 Scope

This document establishes the classification of network security practitioners and specifies the knowledge and skill requirements for various practitioners.

This document is applicable to the use, training, evaluation, and management of network security practitioners by various organizations.

2 Normative references

The contents of the following documents constitute the essential provisions of this document through normative references in the text. Among them, dated references For documents, only the version corresponding to the date is applicable to this document; for undated reference documents, the latest version (including all amendments) is applicable to this document.

GB/T 25069-2022 Information Security Technical Terminology

3 Terms and Definitions

The following terms and definitions defined in GB/T 25069-2022 apply to this document.

3.1 Cybersecurity practitioner

Personnel who are engaged in network security work, assume corresponding network security responsibilities, and have corresponding network security knowledge and skills.

3.2 Knowledge

A fact, information, truth, principle, or insight acquired through experience or education. [Source: GB/T 27203-2016, 2.56]

3.3 Skills

An ability to accomplish a task through education, training, experience, or otherwise.

3.4 Competency

The ability to combine knowledge and skills to achieve desired goals. [Source: ISO /IEC 28000:2022, 3.10]

4 General rules

4.1 Components and their relationships

Network security practitioners need to have the corresponding ability to complete their work tasks. Tasks are tasks that are carried out in order to achieve the relevant objectives of the organization Target, one or a group of work activities and/or work content related to network security that need to be performed. A job category refers to a group of similar net

......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 20 pages — is available in the English PDF.

Referenced standards

Normative references

GB/T 25069-2022Information security techniques—Terminology

Cited by

Similar standards

GB/T 20272-2026|GB/T 20274.2-2026|GB/T 22186-2026|GB/T 24294.1-2026|GB/T 28455-2026|GB/T 31499-2026

How to Download GB/T 42446-2023

1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.