GB/T 43269-2023Information security techniques—Assessment criteria for cybersecurity emergency capability (English PDF)

Foreword

This document complies with the provisions of GB/T 1.1-2020 "Standardization Work Guidelines Part 1: Structure and Drafting Rules of Standardization Documents" Drafting.

1 Scope

This document stipulates the requirements for network security emergency response capabilities and provides the corresponding assessment process.

This document is suitable for all types of organizations to build and evaluate cybersecurity emergency capabilities.

2 Normative reference documents

The contents of the following documents constitute essential provisions of this document through normative references in the text. Among them, the dated quotations For undated referenced documents, only the version corresponding to that date applies to this document; for undated referenced documents, the latest version (including all amendments) applies to this document.

GB/T 20986 Information Security Technology Network Security Incident Classification and Grading Guidelines

GB/T 25069 Information Security Technical Terminology

GB/T 38645-2020 Information Security Technology Network Security Incident Emergency Drill Guide

3 Terms and definitions

The terms and definitions defined in GB/T 25069 and the following apply to this document.

4 Overview

This document divides network security emergency response capabilities into three levels. From low to high, they are level one, level two and level three. The network security capabilities of each level are The full emergency capability requirements include 5 aspects. emergency organization and personnel, emergency system, monitoring and early warning, emergency response, and prevention and guarantee, a total of 15 departments. points, as shown in Figure 1. Chapter 5, Chapter 6, and Chapter 7 respectively stipulate the requirements for first-level, second-level and third-level network security emergency capabilities. High-level Put forward enhanced requirements or add new clauses on the basis of one lower level, and mark in bold the applicable scenarios for network security emergency capabilities at all levels See Appendix A.