GB/T 43242-2023Management specification for access of government offices cloud (English PDF)

Foreword

This document complies with the provisions of GB/T 1.1-2020 "Standardization Work Guidelines Part

1.Structure and Drafting Rules of Standardization Documents" Drafting. Please note that some content in this document may be subject to patents. The publisher of this document assumes no responsibility for identifying patents. This document was proposed and coordinated by the National Agency Affairs Management Standardization Working Group (SAC/SWG17). This document was drafted by: State Administration of Institutional Affairs, Yangtze River Delta (Jiaxing) Branch of China Institute of Standardization, Beijing Municipal Administration of Institutional Affairs Bureau, Guizhou Provincial Government Affairs Administration, Ningbo Municipal Government Affairs Management Bureau, Wuxi Municipal Government Affairs Management Bureau, Capital Information Technology Development Co., Ltd. Company, H3C Technology Co., Ltd., JD Technology Information Technology Co., Ltd., and China Mobile Communications Group Co., Ltd. The main drafters of this document. Tao Xueliang, Bao Yixin, Zhu Xiaoran, Wang Qi, Xu Bofeng, Li Zhenyu, Li Shuo, Lei Yingqian, Cheng Yonghong, Li Xinpeng, Jin Shengbiao, Liu Jin, Ma Xiao, Huang Lixi, Zhou Rundu, Gu Xinxian, Li Haipeng, Wan Xiaolan, Li Chengzhao, Liu Min, Li Huaning, Wen Xinyi. Cloud access management specifications for agency affairs

1 Scope

GB/T 43242-2023 specifies how systems are admitted to the Chinese government office affairs cloud. Consolidating the administration of government buildings, vehicles, assets and services onto a shared cloud means admitting systems built at different times by different suppliers for different organs, and the access decision is where the security and data governance of the whole platform is actually enforced - once a system is inside, it is very hard to take back out. The standard sets the general requirements and the overall architecture of the cloud, comprising the infrastructure, data resource, common support and business application layers, then the access itself: the access levels and rules, and the access requirements at the infrastructure, data resource, common support and application layers. It took effect on 1 January 2024.

This document gives the overall architecture of the agency affairs cloud and stipulates the access, operation and maintenance management and security requirements of the agency affairs cloud. This document applies to activities related to the planning, construction, management and use of the agency affairs cloud in the agency affairs industry.

2 Normative reference documents

The contents of the following documents constitute essential provisions of this document through normative references in the text. Among them, the dated quotations For undated referenced documents, only the version corresponding to that date applies to this document; for undated referenced documents, the latest version (including all amendments) applies to this document.

GB/T 22239-2019 Basic requirements for network security level protection of information security technology

GB/T 36073-2018 Data management capability maturity assessment model

GB/T 39786-2021 Basic requirements for information security technology information system password application

3 Terms and definitions

The following terms and definitions apply to this document.

3.1 Based on cloud computing technology and using new technologies such as big data and artificial intelligence, we build a system that meets the requirements of agency affairs management, service and operation. and office business operations, realize centralized and unified management of agency affairs resources and data, and promote data interconnection and resource management in the agency affairs industry. Digital facilities for source sharing and business collaboration.

3.2 It is composed of computing, storage, network, security, disaster recovery and cloud management software, etc., and provides basic resources and services for the agency affairs cloud. console.

4 Abbreviations

The following abbreviations apply to this document. APP. Application software