GB/T 36957-2018 in English
VALIDInformation security technology--Requirements for disaster recovery service
- Issued on:2018-12-28
- Implemented on:2019-07-01
- File Format:PDF
- Delivery:Via email within 5 business days
$359.00
《GB/T 36957-2018信息安全技术 灾难恢复服务要求》由TC260（全国网络安全标准化技术委员会）归口，主管部门为国家标准化管理委员会。
Introduction
Analysis of the Standard Core Framework
| Module | Core Requirements | Key Technical Indicators |
|---|---|---|
| Resource Allocation | Resource Guarantee in Three Dimensions of Site/System/Team | Backup System Performance ≥ 60% of Production System |
| Service Process | Planning and Design→Construction and Implementation→Operation and Maintenance Full Cycle | RTO/RPO Hierarchical Management |
| Project Management | 10 Types of Management Control Items | Triple Control of Quality/Risk/Configuration |
Key Technology Implementation Points
1. Disaster Recovery Center Construction Specifications
Chapter 5 of the standard clearly requires that the disaster recovery center should meet the following requirements:
- Safety distance: ≥800 meters of risk isolation from the production center
- Building load-bearing capacity: computer room floor load ≥8kN/m²
- Power redundancy: dual power supply + UPS + diesel generator
- Fire protection system: must comply with GB50116-2013 fire alarm specification
2. Disaster recovery capability classification
Refer to GB/T20988-2007 to divide into 6 levels:
| Level | RTO | RPO | Typical scenarios |
|---|---|---|---|
| Level 1 | More than 2 days | 1-7 days | General business system |
| Level 4 | Within 24 hours | Several hours | Financial core system |
Implementation Recommendations
1. Service provider selection criteria
According to clause 7.10 of the standard, the following should be evaluated:
- ≥3 successful cases in the same industry
- Passed ISO22301/ISO27001 certification
- 100% staffing completion rate for primary and backup positions
2. Exercise cycle management
Standard 6.4.2.9-6.4.2.11 stipulates:
- Desktop exercise: once every quarter
- Simulated switchover exercise: once every six months
- Real switchover exercise: at least once a year
Standard Evolution Analysis
Main improvements compared to the 2007 version of the standard:
- Cloud disaster recovery support: New virtualization resource pool management requirements (5.3.1)
- Service process refinement: Split the original "implementation" into three sub-stages: construction/verification/contingency plan
- New confidentiality clauses: Article 7.9 clarifies restrictions on cross-border data transmission
Loading PDF document...
Error loading PDF. Please make sure the file is valid and try again.
We also recommend
-
GB/T 45240-2025 in English
General requirements for device-independent quantum random number generators
2025-01-24 -
GB/Z 24294.1-2018 in English
Information security technology—Guide of implementation for internet-basede-government information security—Part 1:General
2018-03-15 -
GB/T 29243-2012 in English
Information security technology—Specifications of delegated certification path construction and delegated validation for digital certificate
2012-12-31 -
GB/T 15278-1994 in English
Information processing－Data encipherment－Physical layer interoperability requirements
1994-01-02 -
GB/T 32905-2016 in English
Information security technology SM3 cryptographic hash algorithm
2016-08-29 -
GB/T 39276-2020 in English
Information security technology—General security requirements of network products and services
2020-11-19
