T/CSAC 004-2024 Active Group standards

T/CSAC 004-2024 Software supply chain security requirements evaluation method

Publish Date: 2024-07-31 Implement Date: 2024-07-31 For services related to genuine standard inquiry, procurement, translation, and other related services in China, please Contact Us

Price: $ 20.00

Out of stock

Basic Information

Standard Code: T/CSAC 004-2024

Standard Type: Group standards

Standard Status: Active

is_force_gb: no

CCS Name: Data communication

ICS Name: Comprehensive Application of Information Technology

Publish Date: 2024-07-31

Implement Date: 2024-07-31

Scope

Scope: This document specifies the evaluation indicators, evaluation objects, and evaluation processes for the safety requirements of supply and demand organizations in the management of supply activities. This document is applicable to guiding both supply and demand sides in the software supply chain to conduct security assessments, and can provide evaluation basis for third-party institutions, as well as reference for regulatory authorities; Main technical content: Based on GB/T 43698-2024 "Cybersecurity Technology - Software Supply Chain Security Requirements", this document specifies the evaluation indicators, evaluation objects, and evaluation processes for the safety requirements of supply and demand organizations in the management of supply activities, and provides compliance determination methods for each requirement and an overall software supply chain security assurance capability level determination method. This document is applicable to guiding both supply and demand sides in the software supply chain to conduct security assessments, and can provide evaluation basis for third-party institutions, as well as reference for regulatory authorities.