YC/Z 583-2019Construction specification for disaster backup and recovery of information system of tobacco industry (English PDF)

Foreword

This guiding technical document was drafted in accordance with the rules given in GB/T 1.1-2009.

This guiding technical document was proposed by the State Tobacco Monopoly Administration.

This guiding technical document is under the jurisdiction of the Information Subcommittee of the National Tobacco Standardization Technical Committee (SAC/TC144/SC7).

The main drafting units of this guiding technical document. the Tobacco Economic Information Center of the State Tobacco Monopoly Administration, the information system of the China National Tobacco Corporation Hai Disaster Recovery Center, Hangzhou New Century Electronic Technology Co., Ltd.

1 Scope

This technical guidance document specifies the analysis, planning, implementation, and operation management requirements that should be followed in the construction of disaster recovery and backup of information systems in the tobacco industry.

This guiding technical document is applicable to all units in the tobacco industry to carry out information system disaster recovery backup work.

2 Normative references

The following documents are indispensable for the application of this document. For dated reference documents, only the dated version applies to this article Pieces. For undated references, the latest version (including all amendments) applies to this document.

GB/T 20988-2007 Information Security Technology Information System Disaster Recovery Specification GB/T 30285-2013 Information Security Technology Disaster Recovery Center Construction and Operation and Maintenance Management Specification GB 50174-2017 Data Center Design Specification

3 Terms and definitions

The following terms and definitions defined in GB/T 20988-2007 and GB/T 30285-2013 apply to this document. In order to make Use, the following repeated lists of some terms and definitions in GB/T 20988-2007, GB/T 30285-2013.

Business impact analysis the process of analyzing business functions and related information system resources, and evaluating the impact of specific disasters on various business functions.

[GB/T 20988-2007, definition 3.5] 3.2 Recovery time objective After a disaster, the time required for an information system or business function to be restored from a standstill.

[GB/T 20988-2007, definition 3.18] 3.3 Recovery point objective After a disaster, the system and data must be restored to the point in time required.

[GB/T 20988-2007, definition 3.19] 3.4 Production center Use the data center site and the environment to support the production system operation of the organization to centrally manage and process the important information of the organization.

[GB/T 30285-2013, definition 3.4]