GB/T 40640.2-2021 in English
VALIDInformationalized management of chemicals—Part 2:Information security
- Issued on:2021-10-11
- Implemented on:2022-05-01
- File Format:PDF
- Delivery:Via email within 1~3 business days
$175.00
| Standard No: | GB/T 40640.2-2021 |
| Document status: | VALID |
| Title in English: | Informationalized management of chemicals—Part 2:Information security |
| Title in Chinese: | 化学品管理信息化 第2部分：信息安全 |
| Language: | English |
| File Format: | Electronic (PDF) |
| Delivery: | Via email within 1~3 business days |
| Issued on: | 2021-10-11 |
| Implemented on: | 2022-05-01 |
| Professional Classification: | GB-National Standard |
| Related Topics: | Information standard
Informatization Chemical Standards chemicals in english information chemicals Chemoinformatics chemical tube Chemical Management chemical system chemical management Cheminformatics methods chemical system Chemical Standards chemical signal Chemical Management chemical signal Chemical Management System GB/T 40640.2 GB/T 40640.2-2021 Chemicals Chemical Safety Management No. 591 information security standards Information security products revolve around National Standard for Chemical Management information security Information management Chemical Management Industry |
《GB/T 40640.2-2021化学品管理信息化 第2部分：信息安全》由TC251（全国危险化学品管理标准化技术委员会）归口，主管部门为国家标准化管理委员会。
Introduction
Analysis of the core framework of the standard
GB/T40640.2-2021 has established a three-dimensional security protection system for the informationization of chemical management:
| Dimension | Static protection | Dynamic protection |
|---|---|---|
| Physical layer | Environmental/equipment/media security | Real-time monitoring and emergency response |
| Network layer | Firewall/encryption technology | Security monitoring and vulnerability scanning |
| Data layer | Database encrypted storage | Operation Audit and Tracking |
Key Technology Implementation Points
5.2.4 Access Control Mechanism
The standard requires the use of the role-based access control (RBAC) model, which is implemented through a triple verification mechanism:
- Identity authentication: unified token management system
- Permission verification: principle of least privilege
- Operation audit: full process logging
Implementation case of a chemical company
After deploying the access control module required by the standard in the SAP EHS management system, illegal access attempts decreased by 92% and the efficiency of permission configuration increased by 65%.
Standard Evolution and Industry Impact
Compared with the 2015 version of the guidance document, this version adds:
- Information security classification of chemicals throughout their life cycle (4.1.2)
- Technical requirements for network redundancy (5.2.2)
- Unified certification service architecture (Figure 1)
Implementation recommendations
Phase-based construction path
| Phase | Construction content | Meeting requirements |
|---|---|---|
| Infrastructure construction period | Physical environment transformation/network partitioning | Meet GB/T2887/GB/T21052 |
| System deployment period | RBAC system/encrypted channel | Achieve 5.4.1 hierarchical control |
| Optimization and improvement period | Intelligent monitoring/threat intelligence | Exceed the basic requirements of 5.2.6 |
It is recommended that enterprises refer to the Network Security Level Protection 2.0 standard for compliance benchmarking, and focus on strengthening the transmission encryption protection of chemical electronic tag data (related to GB/T40640.3).
Loading PDF document...
Error loading PDF. Please make sure the file is valid and try again.
We also recommend
-
GB/T 10095.1-2022 in English
Cylindrical gears—ISO system of flank tolerance classification—Part 1:Definitions and allowable values of deviations relevant to flanks of gear teeth
2022-10-12 -
GB 6632-1986 in English
Fresh black carp, grass carp, silver carp, variegated carp and carp
- -
GB/T 11901-1989 in English
Water Quality - Determination of Suspended Substance - Gravimetric Method
1989-12-25 -
GB/T 21832.3-2024 in English
Welded austenitic-ferritic(duplex) stainless steel tubes and pipes—Part 3: Pipes for oil and gas transmission
2024-04-25 -
GB/T 6609.3-2004 in English
Chemical analysis methods and Determination of physical performance of alumina Determination of silicon dioxide content-Molybdenum blue photometric method
2004-02-05 -
GB/T 12601-1990 in English
Basic terminology of harmonic gear drive
1990-01-02 -
GB/T 25127.2-2020 in English
Low ambient temperature air source heat pump （water chilling）packages—Part 2：Heat pump （water chilling）packages for household and similar application
2020-06-02 -
GB 38448-2019 in English
Minimum allowable values and grades of the energy efficiency and water efficiency for smart water closets
2019-12-31 -
GB 21252-2023 in English
Norm of energy consumption for unit production of architecture and sanitary ceramics and alumina grinding ball
2023-11-27 -
GB/T 28780-2024 in English
Safety of machinery—Integral lighting system used for machines
2024-04-25
