GB/T 22239-2008 信息系统安全等级保护基本要求
明晰的PDF版,专门增加了文档书签,特方便选择所需章节。依据G家信息安全等级维护管理规则制定本规范。本规范是信息安全等级维护相关系列规范之一。与本规范相关的系列规范包括:——GB/T22240—2008《信息安全技术信息系统安全等级维护定级指南》;——G家规范《信息安全技术信息系统安全等级维护施行指南》。本规范与GB17859-1999、GB/T20269-2006、GB/T20270-2006、GB/T20271-2006等规范共同构成了信息系统安全等级维护的相关配套规范。其间GB17859-1999是基础性规范,本规范、GB/T20269-2006、GB/T20270-2006、GB/T20271-2006等是在GB17859-1999基础上的进一步细化和扩展。本规范在GB17859-1999、GB/T20269-2006、GB/T20270-2006、GB/T20271-2006等技术类规范的基础上,依据现有技术的发展水平,提出和规则了不一样安全维护等级信息系统的最低维护请求,即基本安全请求,基本安全请求包括基本技术请求和基本管理请求,本规范适用于指导不一样安全维护等级信息系统的安全建设和监视管理。在本规范文本中,黑体字表明较低等级中没有呈现或增强的请求。22239-2008信息系统安全等级维护基本请求.pdf
(The clear PDF version has specially added document bookmarks, which is especially convenient for selecting the required chapters. This specification is formulated in accordance with the national information security level maintenance and management rules. This specification is one of a series of specifications related to the maintenance of information security levels. The series of specifications related to this specification include: - GB/T22240-2008 "Guidelines for the Maintenance and Grading of Information Security Technology Information System Security Levels"; - National Standard "Guidelines for the Implementation of Security Level Maintenance of Information Security Technology Information Systems". This specification and GB17859-1999, GB/T20269-2006, GB/T20270-2006, GB/T20271-2006 and other specifications together constitute the relevant supporting specifications for the maintenance of information system security levels. Among them, GB17859-1999 is the basic specification, and this specification, GB/T20269-2006, GB/T20270-2006, GB/T20271-2006, etc. are further refinements and extensions on the basis of GB17859-1999. On the basis of technical specifications such as GB17859-1999, GB/T20269-2006, GB/T20270-2006, GB/T20271-2006 and other technical specifications, this specification proposes and rules different safety maintenance level information according to the development level of existing technology. The minimum maintenance requirements of the system, namely the basic security requirements, the basic security requirements include basic technical requirements and basic management requirements, this specification is applicable to guide the security construction and monitoring management of information systems with different security maintenance levels. In the text of this specification, bold text indicates requests that are not rendered or enhanced at lower levels.
22239-2008 Basic Requirements for Maintenance of Information System Security Levels.pdf)
页:
[1]