GB/T 36324-2018 Information security technology—Information security classification specifications of industrial control systems

Scope

This standard specifies the rules and methods for classifying the information security levels of industrial control systems based on risk assessment, proposes a classification model and grading elements, including the importance of industrial control system assets, the potential impact of existing risks, and the level of information security threats that need to be resisted. It also outlines the characteristics of the four information security levels of industrial control systems.
This standard is applicable to industrial production enterprises and relevant administrative departments, providing guidance for the classification of information security levels of industrial control systems and a basis for the planning, design, operation and maintenance, as well as evaluation and management of industrial control system information security.

Development Information

Referenced Standards

Related Standards