GB/T 39786-2021 Information security technology—Baseline for information system cryptography application

Scope

This standard specifies the basic requirements for password applications of information systems from Level 1 to Level 4. It proposes technical requirements for password applications from Level 1 to Level 4 from four technical perspectives: physical and environmental security of information systems, network and communication security, equipment and computing security, and application and data security. It also proposes management requirements for password applications from Level 1 to Level 4 from four aspects: management system, personnel management, construction and operation, and emergency response.
Note: The technical requirements and management requirements for password applications of Level 5 are not described in this standard.
This standard is applicable to guiding and standardizing the planning, construction, operation, and evaluation of password applications in information systems. On the basis of this standard, various fields and industries can combine the password application needs of their own fields and industries to guide and standardize the password applications of information systems.

Development Information

Referenced Standards

Related Standards