T/ZDL 019-2023 Active

Main Technical Content: 5. Planning and Design Management 5.1 Planning Management 5.1.1 A cybersecurity strategy should be developed and continuously improved to clarify the basic requirements and main objectives for ensuring network security, and propose key tasks and measures for network security in priority areas. 5.1.2 When planning and designing the network, security protection requirements should be clearly defined, and ensure that security measures are planned, constructed, and used simultaneously. 5.1.3 A funding guarantee system for network security should be established, with a dedicated budget allocated to ensure that network security investments account for no less than 5% of total information technology investments. 5.1.4 Based on the category of business systems, the network should be divided into a production control zone, a management information zone, and an internet zone. The production control zone should be divided into a control zone and a non-control zone; the management information zone can, without affecting the security of the production control zone, divide security zones according to different security requirements of each enterprise. 5.1.5 The production control zone and the management information zone should be physically isolated by dedicated horizontal one-way security isolation devices; the management information zone and the internet zone should be logically isolated by information network security isolation devices; and the internet zone and the internet should be logically isolated by common security protection devices such as firewalls. 5.2 Design Management 5.2.1 During the feasibility study phase of the information system, the protection level and protection requirements of the system should be clarified in accordance with the national cybersecurity grading protection system and standards, and a grading report should be prepared and submitted to the relevant departments for approval of the information system gr