GB/T 42926-2023Specification of financial information system cybersecurity risk assessment (English PDF)
金融信息系统网络安全风险评估规范
This is a limited preview
Buy now to download the full PDF (62 pages)
Need quotation for your management?
Get a formal quotation for GB/T 42926-2023 in 30 minutes.
Issued by
SAMR; SAC
Level / Type
National · Recommended
Issue date
August 6, 2023
Implementation date
December 1, 2023
Scope
GB/T 42926-2023 is the English-translated version of 金融信息系统网络安全风险评估规范.
GB/T 42926-2023 is the Chinese standard "Specification of financial information system cybersecurity risk assessment".
Its scope clause reads: This document establishes the key points, principles, elements and principles of risk assessment work, and stipulates the risk assessment preparation stage, identification stage, risk Requirements for calculation and processing phase work.
This document is applicable to financial management departments, financial industry institutions and network security risk assessment service agencies when conducting financial information system network security.
Complete risk assessment work. Note. The “risk assessment” in the terms of this document refers to “financial information system network security risk assessment”.
Its clauses include normative reference documents; terms and definitions; abbreviations.
Found what you need?
Document preview — GB/T 42926-2023
National Standard of the People's Republic of China
- ICS
- 03.060
- Classification
- A11
Issued by: State Administration for Market Regulation; Standardization Administration of the PRC
Contents
- Preface
- Introduction
- 1 Scope
- 2 Normative reference documents
- 3 Terms and Definitions
- 4 Abbreviations
- 5 Key points and principles of risk assessment
- 5.1 Work Points
- 5.2 Working Principles
- 6 Elements and principles of risk assessment
- 6.1 Risk assessment elements
- 6.2 Principles of Risk Assessment
- 7 Phased work of risk assessment
- 7.1 Preparatory phase
- 7.2 Identification Phase
- 7.3 Risk calculation and treatment stage
- Appendix A (Informative) Evaluation Reference Sample
- Appendix B (Informative) Asset Identification and Value Assignment Table
- Appendix C (informative) Information system threat assessment method
- Appendix D (informative) Information system vulnerability assignment method
- Appendix E (informative) Method for assigning the likelihood of information system vulnerability being exploited
- Appendix F (informative) Asset risk list of information system
1 Scope
This document establishes the key points, principles, elements and principles of risk assessment work, and stipulates the risk assessment preparation stage, identification stage, risk
Requirements for calculation and processing phase work.
This document is applicable to financial management departments, financial industry institutions and network security risk assessment service agencies when conducting financial information system network security.
Complete risk assessment work.
Note. The “risk assessment” in the terms of this document refers to “financial information system network security risk assessment”.
2 Normative reference documents
The contents of the following documents constitute essential provisions of this document through normative references in the text. Among them, the dated quotations
For undated referenced documents, only the version corresponding to that date applies to this document; for undated referenced documents, the latest version (including all amendments) applies to this document.
GB/T 20269-2006 Information security technology information system security management requirements
GB/T 20984-2022 Information security technology Information security risk assessment method
GB/T 22240-2020 Information security technology network security level protection grading guide
GB/T 25069-2022 Information security technical terms
GB/T 31509-2015 Information Security Technology Information Security Risk Assessment Implementation Guide
3 Terms and definitions
The following terms and definitions as defined in GB/T 20269-2006, GB/T 25069-2022 and GB/T 20984-2022 apply in this document.
3.1 asset value
An indication of the importance or sensitivity of an asset.
Note. Asset value is the attribute of the asset and is also the main content of asset identification.
4 Abbreviations
The following abbreviations apply to this document.
ty) […]
......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 62 pages — is available in the English PDF.
Referenced standards
Normative references
- GB/T 20269-2006Information security technology Information system security management requirements
- GB/T 20984-2022Information security technology—Risk assessment method for information security
- GB/T 22240-2020Information security technology—Classification guide for classified protection of cybersecurity
- GB/T 25069-2022Information security techniques—Terminology
- GB/T 31509-2015Information security technology—Guide of implementation for information security risk assessment
Similar standards
How to Download GB/T 42926-2023
- 1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
- 2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
- 3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
- 4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.
Related Standards
GB/T 20269-2006 — Information security technology Information system security management requirements
GB/T 20984-2022 — Information security technology—Risk assessment method for information security
GB/T 22240-2020 — Information security technology—Classification guide for classified protection of cybersecurity
Secure payment via Stripe
Payments accepted
GB/T 42926-2023
$710.00