GB/T 42581-2023Information technology service - Evaluation criteria for data center business continuity (English PDF)

Foreword

This document is in accordance with the provisions of GB/T 1:1-2020 "Guidelines for Standardization Work Part 1: Structure and Drafting Rules for Standardization Documents" drafting: Please note that some contents of this document may refer to patents: The issuing agency of this document assumes no responsibility for identifying patents: This document is proposed and managed by the National Information Technology Standardization Technical Committee (SAC/TC28): This document was drafted by: Digital China System Integration Service Co:, Ltd:, China Electronics Standardization Research Institute, Beijing Taiji Huabao Branch Technology Co:, Ltd:, Shanghai Pudong Development Bank Co:, Ltd:, Chengfang Financial Information Technology Service Co:, Ltd:, Beijing Tongchuang Yongyi Branch Technology Development Co:, Ltd:, Guanyi Zhongxiang (Beijing) Technology Co:, Ltd:, State Grid Blockchain Technology (Beijing) Co:, Ltd:, China Pacific Insurance (Group) Co:, Ltd: Group) Co:, Ltd:, Guotai Junan Securities Co:, Ltd:, China Civil Aviation Information Network Co:, Ltd:, Industrial Bank Co:, Ltd:, China Everbright Bank Co:, Ltd:, China Mobile Communications Group Co:, Ltd:, Shanghai Hanwei Information Technology Co:, Ltd:, Beijing 21Vianet Broadband Data Center Co:, Ltd:, GDS Service Co:, Ltd:, China Electronics Technology Big Data Research Institute Co:, Ltd:, Hua Xia Bank Co:, Ltd: Division, Zhongping Information Technology Co:, Ltd:, Shenzhen Qianhai WeBank Co:, Ltd:, Chongqing Communication Construction Co:, Ltd:, Wuhan Stone Information Service Co:, Ltd:, Guangzhou Saibao Certification Center Service Co:, Ltd:, Beijing Yinxin Changyuan Technology Co:, Ltd:, Beijing DXW Information Technology Service Co:, Ltd:, Capital Information Development Co:, Ltd:, Nanjing Yunxinda Technology Co:, Ltd:, Beijing Qingyun Technology Co:, Ltd: Co:, Ltd:, Beijing Haiying Science and Technology Information Research Institute, and Shanghai Shuteng Software Technology Co:, Ltd: The main drafters of this document: Sun Jiangang, Cui Jing, Zhao Yongxiang, Liu Dengke, Zhang Yong, Zheng Gongyan, Zhu Aibin, Wang Ruixuan, Xiao Jianyi, Yang Xiaoping, Zhi Liangliang, Zhu Xudong, Xiao Xin, Yan Jinli, Guo Xinwei, Jia Lu, Liu Jingjie, Shen Wei, Ma Hongjie, Gao Yong, Yuan Guangfei, Zhou Xingjian, Shang Di, Han Guoquan, Xu Hongbo, Liu Qiang, Wang Xuesong, Zhang Mingying, Zhang Hongwei, Ma Yu, Gao Shan, Chen Jun, Tian Ruijie, Chen Hongfeng, Yu Feng, Zhang Xin, He Yonghong, Huang Xuchang, Huang Gengdong, Liu Yao, Liu Lin, Wan Jinglong, Zheng Hao, Gong Caiyu, Zhou Gaodeng, Hao Shuqi, Zhang Shuling, Wu Yun, Cao Yang, Yang Quan, He Yi, Xu Lichang, Shen Jinde, Qiu Ligong, Chen Zejia, Shi Yuan, Men Meiling:

1 General With the implementation of national strategies such as the network power strategy, the national big data strategy, and Made in China 2025, artificial intelligence, cloud computing technology With the wide application of technology and other technologies, and the gradual deepening of digital transformation in all walks of life, more and more data centers and information technology will be born: In the industry that relies on it, the interruption of data center services is no longer the business of the data center itself, and will become a systemic social risk that must be triggered Highly valued: my country has issued a number of national standards in the field of business continuity management, but the requirements of these standards are too general and cannot reflect the data The business characteristics of the center cannot guide the business continuity work of the data center well: The data center business continuity level model proposed in this document focuses on the business characteristics of the data center itself, and is suitable for providing site services: It can be used to evaluate the business connection of different data centers: It can also guide the data center to improve its own business continuity level: 0:

2 Relationship with other standards The data center business continuity management capability part of this document is consistent with the "Business Continuity Management of Public Safety Business Continuity Management System" The capability structure of the "Guidelines for Capability Assessment" (GB/T 40755-2021) is consistent, and according to the characteristics of the data center, the capability index scoring standard was refined: This document also refers to GB/T 33136-2016 "Information Technology Service Data Center Service Capability Maturity Model", ISO /IEC :20000- Requirements), this document meets the requirements of these standards or relevant parts thereof: Application of this document effectively supports the above standards or their As required by the terms: Information Technology Services Data Center Business Continuity Level Evaluation Criteria

1 Scope

GB/T 42581-2023 provides a graded way of stating how much interruption a data centre can absorb. Continuity claims are usually made in the language of redundancy - dual power feeds, N+1 cooling, diverse fibre routes - which describes what has been bought rather than what would happen. A grading model turns the question around and asks what level of continuity the facility actually achieves, on evidence, so that two data centres can be compared and so that a customer outsourcing part of their operation can specify what they need. This document defines a business continuity level model for data centres, specifies the requirements at each level, and sets out how the level is determined: the construction and evaluation of the level, the calculation of the continuity score, and the determination of the resulting grade, followed by the evaluation methods themselves. It applies both to organisations establishing, implementing, maintaining and improving their own data centre business continuity management, and to those assessing the continuity capability and grade of an outsourced facility they are considering. Under ICS 35.080 and CCS L77, it is aimed at data centre operators, their enterprise customers and third-party evaluation bodies.

This document defines the data center business continuity level model, specifies the business continuity level requirements, and specifies the corresponding evaluation method: This document applies to:

a) Establish, implement, maintain and continuously improve data center business continuity management;

b) If the outsourced data center is selected to provide some facilities, evaluate the business continuity capability and level of the supplier's data center;

c) Externally evaluate the business continuity level of the data center:

2 Normative references

The contents of the following documents constitute the essential provisions of this document through normative references in the text: Among them, dated references For documents, only the version corresponding to the date is applicable to this document; for undated reference documents, the latest version (including all amendments) is applicable to this document:

GB/T 2887 General Specifications for Computer Sites

GB/T 33136-2016 Information Technology Service Data Center Service Capability Maturity Model

GB 50174 Data Center Design Code

3 Terms and Definitions

GB/T 33136-2016, ISO 22301:2019 and the following terms and definitions apply to this document: 3:1 data center datacenter It consists of computer sites (computer rooms), other infrastructure, information system software and hardware, information resources (data) and personnel, as well as corresponding management systems entities composed of degrees: [Source: GB/T 32910:1-2017,2:1] 3:2 data center business business of data center Activities that use capabilities and resources to create value for data center stakeholders:

Note: A data center usually maintains a complete service catalog to define the business scope of the data center, and communicate with the demand-side organization of the data center (may This can be external, or it can be the parent organization or another organization belonging to the same parent organization) by signing a service level agreement to specify the specific business service: Refer to ISO /IEC :20000-1, SJ/T 11691: 3:

3 The data center provides the infrastructure, information system hardware (physical and virtual resources), software and data required by the business: