Valid

GB/T 44862-2024Cybersecurity technology - Cyber-resilience evaluation criteria (English PDF)

Preview PDF

This is a limited preview

Buy now to download the full PDF (26 pages)

Need quotation for your management?

Get a formal quotation for GB/T 44862-2024 in 30 minutes.

Issued by

State Administration for Market Regulation, China National Standardization Administration

Level / Type

National · Recommended

Issue date

October 26, 2024

Implementation date

May 1, 2025

Scope

GB/T 44862-2024 (Cybersecurity technology - Cyber-resilience evaluation criteria) is available as an English-translated PDF.

GB/T 44862-2024 is the Chinese national standard of evaluation criteria for cyber-resilience under cybersecurity technology. It sets out a network resilience evaluation index system and evaluation methods.

The indicators are grouped into prevention, bearing, recovery and adaptation capabilities, covering matters such as situational awareness, supply chain management, emergency response, containment, disaster backup, business continuity, self-management and node and network adaptability.

A normative appendix gives the evaluation table, and informative appendices cover extreme scenarios, requirements for complex information systems and architecture design methodology.

It applies to self-assessment by organisations, third-party assessment by cybersecurity service bodies, and the design, building and strengthening of network resilience.

Issued on 26 October 2024 and applicable from 1 May 2025, it replaces no earlier edition.

Found what you need?

Document preview — GB/T 44862-2024

National Standard of the People's Republic of China

ICS: 35.030
Classification: L 80

Issued by: State Administration for Market Regulation, China National Standardization Administration

Preface
1 Scope
2 Normative references
3 Terms and Definitions
4 Abbreviations
5 Overview
5.1 Network Resilience
5.2 Evaluation Index System
5.3 Standard Structure
6 Network Resilience Indicators
6.1 Prevention Capabilities
6.1.1 Situational Awareness
6.1.2 Inspection and Analysis
6.1.3 Collaborative Defense
6.1.4 Supply Chain Management
6.2 Ability to bear
6.2.1 Emergency Response
6.2.2 Limitation of Losses
6.2.3 Containment
6.2.4 Survivability
6.3 Resilience
6.3.1 Disaster Backup
6.3.2 Business Continuity
6.3.3 Data and Business Recovery
6.4 Adaptability
6.4.1 Self-management
6.4.2 Refactoring
6.4.3 Node Adaptability
6.4.4 Network Adaptability
7 Evaluation Methods
Appendix A (Normative) Network Resilience Evaluation Table
Appendix B (Informative) Examples of Network Resilience Indicators under Extreme Scenarios and Extreme Cybersecurity Incidents
Appendix C (Informative) Analysis of Network Resilience Requirements for Complex Information Systems
Appendix D (Informative) Network Resilience Architecture Design Methodology
Reference

Foreword

This document is in accordance with the provisions of GB/T 1.1-2020 "Guidelines for standardization work Part 1: Structure and drafting rules for standardization documents" Drafting.

1 Scope

This document specifies the network resilience evaluation criteria and provides a network resilience evaluation index system and evaluation methods.

This document is applicable to the self-assessment of network resilience by organizations, the third-party assessment of network resilience by cybersecurity service agencies, and the Design, build, and enhance the network resilience of organizations.

2 Normative references

The contents of the following documents constitute the essential clauses of this document through normative references in this document.

For referenced documents without a date, only the version corresponding to that date applies to this document; for referenced documents without a date, the latest version (including all amendments) applies to This document.

GB/T 20988 Information security technology Information system disaster recovery specification

GB/T 25069-2022 Information Security Technical Terminology

GB/T 30146-2023 Security and Resilience Business Continuity Management System Requirements

GB/T 43269-2023 Information security technology - Criteria for the assessment of cybersecurity emergency response capabilities

3 Terms and Definitions

The terms and definitions defined in GB/T 25069-2022 and the following apply to this document.

3.1 Cyberresilience

When the network faces adverse conditions, pressure, attacks or lost components, it should have the ability to prevent, withstand, recover and adapt to ensure Maintain the stability of system functions and structures, achieve orderly and effective responses to major network security incidents, and ensure the stable operation of key businesses.

Note: The term "network" in this document refers to a network composed of computers or other information terminals and related equipment that receives and sends information according to certain rules and procedures. A system for collecting, storing, transmitting, exchanging and processing information.

3.2 Critical business

Once a cybersecurity incident occurs, it may seriously affect the network security and stability of an organization or customer, causing significant business losses.

3.3 Survivability

The ability of the system to continue to run basic business functions and complete key business operations in the event of an attack, failure, malfunction or interruption.

Note: Failure means that a system or component loses its purpose or function as designed, and although it can operate, it cannot output the correct results.

A state in which a system or device cannot perform its specified functions. Basic business functions refer to the basic functional units that constitute business functions, such as processes, threads, or algorithms. Modules, etc. [Source: ISO /IEC /IEEE 24765-2017, 3.4060, with modifications]

4 Abbreviations

The following abbreviations apply to this document.

......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 26 pages — is available in the English PDF.

Referenced standards

Normative references

How to Download GB/T 44862-2024

1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.