GA/T 1389-2017 in English

VALID

Information security technology—Guidelines for grading of classified protection of cyber security

Issued on:2017-05-08
Implemented on:2017-05-08
File Format:PDF
Delivery:Via email within 1~3 business days

Price(USD)： $180.00
$175.00

Standard No:	GA/T 1389-2017
Document status:	VALID
Title in English:	Information security technology—Guidelines for grading of classified protection of cyber security
Title in Chinese:	信息安全技术网络安全等级保护定级指南
Language:	English
File Format:	Electronic (PDF)
Delivery:	Via email within 1~3 business days
Issued on:	2017-05-08
Implemented on:	2017-05-08
Chinese Classification:	L80-Data encryption
Professional Classification:	GA-Security
Related Keywords:	information security technology guidelines serious damage urban traffic dispatching system third level national security business information security classified protection cyber security introduction analysis
Related Topics:	cyber security Quadrupole Specifications Security Level Biosafety Level 4 Information Security Technology Network Security Monitoring Basic Requirements and Implementation Guidelines Basic information network Biosafety Level 5 Technical Grade Table Information Security Technology Security Vulnerability Classification Guide Information Security Technology Security Vulnerability Classification Guide Network Security Classified Protection Rating Guide Information Security Technology Network Security Classified Protection Grading Guide Class protection Grading Guide Guidelines for Grading Security Classified Protection of Information System in Transportation Industry Network Security Level Protection Information Security Technology Network Security Level Protection Information Security Technology Network Security Level Protection Guidelines for the construction of hospital network and information security guarantee system GB/T 20986-2023 Information Security Technology Network Security Incident Classification and Grading Guidelines GA/T 1399.1-2017 gb/t 36627-2018 Technical Guidelines for Information Security Technology Cybersecurity Level Protection Testing and Evaluation information security standards Information security level protection technology Reservoir standardized information security protection level requirements information security Dicyandiamide safety level classification ga/t2017 Compilation of network security level protection standards Technical Specifications for Annual Assessment of Level Protection

Introduction

Analysis of the Standard Core Framework

Protection Level	Object of Infringement	Degree of Infringement	Typical Scenarios
First Level	Rights of Citizens/Organizations	General Damage	Non-core Systems such as Corporate Websites
Second Level	Social Public Interests	Serious Damage	Urban Traffic Dispatching System
Third Level	National Security	Extremely Serious Damage	Provincial Government Cloud Platform

Analysis of Key Technical Elements

Cloud Computing Platform Classification Specifications

Cloud service providers' cloud computing platforms must be independently classified, and tenant systems must be individually classified based on their business attributes. Large cloud platforms must be divided by service domain, and the platform classification must not be lower than the highest classification of the hosting system.

Special Requirements for Industrial Control Systems

The field device layer, control layer, and monitoring layer should be classified as a whole. The production management layer can refer to Section 5.2.5. A typical case study of a DCS system in the petrochemical industry shows that control interruptions can result in direct economic losses of tens of millions of yuan per day.

Implementation Recommendations

Identification of Classification Objects: Must meet three characteristics (clear responsible parties, independent business operations, and system elements)
Matrix Comparison Method: Simultaneously evaluate the two dimensions of business information security and system service security
Key Points for Expert Review: Systems above Level 2 require cross-disciplinary expert review, and Level 4 systems must be reported to the National Special Committee

Analysis of Standard Evolution

Compared to Document No. 43 of 2007, this standard adds classification specifications for new systems such as the Internet of Things and Mobile Internet, and clarifies that big data is generally classified as Level 3 or above, reflecting the high regard for data sovereignty.

More samples: QC/T 942-2021 YD/T 3934-2021 JJG 21-2008

Sample only — not a preview of GA/T 1389-2017

Loading PDF document...

Error loading PDF. Please make sure the file is valid and try again.

We also recommend

GA/T 1390.3-2017 in English

Information security technology—General requirements for classified protection of cyber security—Part 3:Special security requirements for mobile interconnection
2017-05-08
GA/T 1390.2-2017 in English

Information security technology—General requirements for classified protection of cyber security—Part 2:Special security requirements for cloud computing
2017-05-08