Partners save 15% on every standard

Valid

GB/T 45940-2025Cybersecurity technology — Implementation guide of cybersecurity operation and maintenance (English PDF)

网络安全技术网络安全运维实施指南

Open the GB/T 45940-2025 preview as PDF

Preview — first pages of GB/T 45940-2025 (full document: 30 pages)

This is a limited preview

Buy now to download the full PDF (30 pages)

Issued by

SAMR; SAC

Level / Type

National · Recommended

Issue date

August 1, 2025

Implementation date

February 1, 2026

Scope

GB/T 45940-2025 is the English-translated version of 网络安全技术网络安全运维实施指南.

GB/T 45940-2025 is the Chinese national standard covering running security operations after the system is built — the reference framework and what is required of the provider, its people and its security operations centre, the service model and the process by which the engagement is set up, then the working cycle of identification, protection, monitoring and analysis, incident handling and coordination, and the effectiveness evaluation and capability rating that tell a buyer what was actually delivered. First edition, in force from 1 February 2026. Issued on 1 August 2025, it has been in force since 1 February 2026.

Document preview — GB/T 45940-2025

National Standard of the People's Republic of China

ICS: 35.030
Classification: L 80

Issued by: State Administration for Market Regulation; Standardization Administration of the PRC

PrefaceIII
1 Scope1
2 Normative references1
3 Terms and Definitions1
4 Abbreviations2
5 Overview2
5.1 Network Security Operation and Maintenance Objectives2
5.2 Network Security Operation and Maintenance Reference Framework2
6 Network Security Operation and Maintenance Conditions3
6.1 Network Security Operation and Maintenance Provider3
6.2 Network Security Operation and Maintenance Personnel3
6.3 Cybersecurity Operations Center4
7 Establishment of network security operation and maintenance business4
7.1 Network Security Operation and Maintenance Model4
7.2 Network Security Operation and Maintenance Implementation Content5
7.3 Network Security Operation and Maintenance Business Establishment Process6
8 Network Security Operation and Maintenance Implementation6
8.1 Operation and Maintenance Implementation Process6
8.2 Operation and Maintenance Management7
8.3 Identification8
8.4 Protection10
8.5 Monitoring and Analysis11
8.6 Incident Handling14
8.7 Collaboration15
8.8 Operation and Maintenance Effectiveness Evaluation16
Appendix A (Informative) Network Security Operation and Maintenance Capability Assessment19
A.1 Evaluation Model19
A.2 Assessment Content20
A.3 Rating Methodology21
Appendix B (Informative) Construction of Cybersecurity Operations Center22
B.1 Construction Model22
B.2 Site conditions28
B.3 Platform and Tools29
Reference31

Foreword

This document is in accordance with the provisions of GB/T 1.1-2020 "Guidelines for standardization work Part 1: Structure and drafting rules for standardization documents" Drafting.

Please note that some of the contents of this document may involve patents. The issuing organization of this document does not assume the responsibility for identifying patents.

This document is proposed and coordinated by the National Cybersecurity Standardization Technical Committee (SAC/TC260).

This document was drafted by: China Information Security Evaluation Center, Hangzhou Anheng Information Technology Co., Ltd., National Information Center, Beijing Shen Green Alliance Technology Co., Ltd., Beijing Changting Technology Co., Ltd., Qi'anxin Technology Group Co., Ltd., Beijing Bangbang Security Technology Co., Ltd.

Company, China Academy of Information and Communications Technology, Beijing Tianrongxin Network Security Technology Co., Ltd., 360 Digital Security Technology Group Co., Ltd., New Great Wall Technology Co., Ltd., Tsinghua University, China Unicom, Institute of Information Engineering, Chinese Academy of Sciences, Hangzhou Deepin Technology Co., Ltd., State Grid Siji Network Security Technology (Beijing) Co., Ltd., Huaneng Information Technology Co., Ltd., Sangfor Technologies Co., Ltd.

Company, Beijing CESI Technology Development Co., Ltd., Shanghai Sanling Guard Information Security Co., Ltd., China Welfare Lottery Technology Development (Beijing) Co., Ltd.

Company, Shenzhen Broadcom Intelligent Technology Co., Ltd., Rockwell Automation Technology Group Co., Ltd., Antiy Technology Group Co., Ltd., Zhouzhongruan Information Technology Co., Ltd., Beijing Zhiqi'an Technology Co., Ltd., Hangzhou NetEase Zhiqi Technology Co., Ltd., Beijing Winut Technology Co., Ltd.

Co., Ltd., Beijing Shengxin Network Technology Co., Ltd., Beijing Huidu Technology Co., Ltd., Tianyi Cloud Technology Co., Ltd., Guangdong Wangan Technology Co., Ltd.

Company, Ningbo Holly Information Security Research Institute Co., Ltd., Heilongjiang Anxin Yucheng Technology Development Co., Ltd.

The main drafters of this document are: Wang Yan, Yang Jingjing, Yuan Mingkun, Chen Xing, Tian Lidan, Liu Bei, Yang Ying, Cao Jia, Li Yunlei, Xu Yuna, Tian Baosong, Yang Kun, Zhang Long, Ma Yu, Chen Xiangxi, Zhao Xiangnan, Fang Ning, Dai Hanglv, Yang Jiahai, Bai Jun, Wang Xinru, Wang Yuwei, Yun Han, Liu Jilin, Pan Zhongying, Cui Lei, Liu Biao, Wei Shiguang, Nie Jun, Wang Xiwei, Shen Dongsheng, Zhou Kai, Zhou Lingjun, Xie Meicheng, Zhou Sen, Dudu, Lu Zhigang, Li Wei, Xin Chen, Wei Shushan, Cao Jing, Cui Xin, and Yang Liang. Cybersecurity Technology Network Security Operations and Maintenance Implementation Guide

1 Scope

This document proposes a reference framework for network security operations and maintenance, the conditions for network security operations and maintenance providers and personnel, and the process for establishing operations and maintenance services.

The main work links of network security operation and maintenance, such as operation and maintenance management, identification, protection, monitoring and analysis, incident handling, coordination and effect evaluation, are given. Implementation content.

This document is applicable to network security operation and maintenance providers and demanders. It is used to provide guidance for the implementation of network security operation and maintenance, and to provide guidance for network security operation and maintenance.

It provides a reference for operation and maintenance demanders and third-party organizations to evaluate the implementation effect and capabilities of network security operation and maintenance.

2 Normative references

GB/T 20984

GB/T 20985.2

GB/T 20986-2023

GB/T 22239

GB/T 24363

GB/T 25069-2022

GB/T 28827.3

GB/T 32914-2023

GB/T 39204-2022

GB/T 39786

GB/T 42446

GB/T 43698-2024

GB/T 45577

3 Terms and Definitions

The terms and definitions defined in GB/T 25069-2022 and the following apply to this document.

3.1 A network security service mode for handling, coordinating and other tasks

To resist cyberspace security threats, control network security risks, ensure business continuity and stable operation, and guarantee business and data Ensure the confidentiality, integrity and availability of data, coordinate technology, processes, personnel and other factors, and continuously carry out management, identification, protection, monitoring and analysis, and event

......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 30 pages — is available in the English PDF.

Referenced standards

Normative references

GB/T 20985.2

Editions of GB/T 45940

Edition	Title	Revision	Status
GB/T 45940-2025	Cybersecurity technology - Implementation guide of cybersecurity operation and maintenance	current edition	Current

This page sells the current edition, GB/T 45940-2025. Earlier editions are listed for reference only.

How to Buy GB/T 45940-2025

1Add to cart. Click the "Buy GB/T 45940-2025" button on this page. You can add more standards before checkout.
2Checkout. Enter your email and billing details. Payment is processed securely by Stripe (cards, Apple Pay, Google Pay supported).
3Instant delivery (0–9 sec). Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
4Invoice included. A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.