(The basic security maintenance capabilities that different levels of information systems should have are as follows: The first level of security maintenance capabilities: It should be able to protect the system from malicious attacks suggested by threats sources with few resources, common natural disasters, As well as other critical resource hazards formed by threats of appropriate damage levels, after the system is compromised, some functions can be restored. Second-level security maintenance capability: It should be able to protect the system from malicious attacks suggested by external small organizations, threat sources with few resources, common natural disasters, and other threats to the primary resources of the appropriate degree of damage. Find the most important security vulnerabilities and security incidents, after the system is compromised, you can restore some functions within a period of time. The third-level security maintenance capability: it should be able to protect the system from malicious attacks, serious natural disasters, and other threats of appropriate degree of harm from externally organized groups, threat sources with relatively rich resources, under a consistent security strategy The primary resource damage formed can find security loopholes and security incidents, and after the system is compromised, most functions can be quickly restored. Level 4 security maintenance capability: It should be able to protect the system from malicious attacks, severe natural disasters, and other threats of appropriate degree of harm from other national-level, hostilely-organized, and well-resourced threat sources under a consistent security policy The resulting resource hazards This document includes the following attachments:
Basic requirements for security level maintenance of information security technology information system.pdf
Including multiple files, please download and test by yourself!)