Industry standard filing Notice 2012 No. 8 (No. 152 overall)
Issuing agency(ies)
People's Bank of China
Summary
This standard stipulates the financial industry to the information system security level protection evaluation evaluation requirements, including the second level information system, the third pole information system and the fourth quarter information system security evaluation evaluation unit evaluation requirements and information system overall evaluation requirements, etc. The According to the financial industry information system grading situation, there is no five-level system, and the system does not need to go to the public security organs for the record, not as the focus of evaluation. This standard omits the specific content requirements for unit evaluation of the first quarter information system and the fifth level information system. This standard is applicable to the safety evaluation and evaluation of the information security level of the information system for the self-evaluation (such as the secondary information system) and the information security evaluation service organization (into the third and fourth level information systems).
