JR/T 0073-2012: Testing and evaluation service security guide for classified protection of information security of financial industry

Delivery: 9 seconds. Download (and Email) true-PDF + Invoice.
Get Quotation: Click JR/T 0073-2012 (Self-service in 1-minute)
Newer / historical versions: JR/T 0073-2012

Preview True-PDF

Scope

This standard summarizes the security needs and the business characteristics
of financial industry application system of many years, clarifies the basic
requirements of agency safety, personnel safety, process safety, testing
objects safety, and tool safety with reference to international-domestic related
information security standards and industry standards.
This standard applies to the third party (hereinafter referred to as assessment
organization) of which the information security departments engaging in the
information systems of financial industry carry out information security
classified protection evaluation, and the supervision-management of personnel
and evaluation activities.

Basic Data

Standard ID	JR/T 0073-2012 (JR/T0073-2012)
Description (Translated English)	Testing and evaluation service security guide for classified protection of information security of financial industry
Sector / Industry	Finance Industry Standard (Recommended)
Classification of Chinese Standard	A11
Classification of International Standard	03.060
Word Count Estimation	12,161
Regulation (derived from)	Industry standard filing Notice 2012 No. 8 (No. 152 overall)
Issuing agency(ies)	People's Bank of China
Summary	This standard stipulates the security requirements and business characteristics of the financial industry application system for many years, and makes reference to the international and domestic relevant information security standards and industry standards, and clearly identifies the safety, personnel safety, process safety, safety of objects, safety of tools, etc. Aspects of the basic requirements. This standard applies to the information security function departments engaged in the financial industry information system to carry out information security level protection evaluation of third party institutions (hereinafter referred to as evaluation agencies) and personnel and their evaluation activities supervision and management.