GB/T 20274.1-2006: Information security technology -- Evaluation framework for information systems security assurance -- Part 1: Introduction and general model
Information security technology -- Evaluation framework for information systems security assurance -- Part 1: Introduction and general model
Sector / Industry
National Standard (Recommended)
Classification of Chinese Standard
L80
Classification of International Standard
35.040
Word Count Estimation
71,749
Date of Issue
2006-05-31
Date of Implementation
2006-12-01
Quoted Standard
GB/T 9387.2-1995; GB/T 18336-2001
Regulation (derived from)
China Announcement of Newly Approved National Standards No. 7, 2006 (No. 94 overall)
Issuing agency(ies)
General Administration of Quality Supervision, Inspection and Quarantine of the People's Republic of China, Standardization Administration of the People's Republic of China
Summary
This standard gives the basic information system security concepts and models, and the establishment of information systems security framework. This section applies to information systems security work in all relevant parties, including the design developers, project implementers, evaluators, certification and accreditation persons. This section does not apply to the following aspects: a) assessment of staff skills and abilities, but the personnel safety requirements reflected in the management of security, b) System Assessment Law, c) evaluation of the quality inherent in cryptographic algorithms.
