T/TSIA 002-2019 Abolished Group standards

T/TSIA 002-2019 Cybersecurity Third-party Service Provider Management Specification

Publish Date: 2019-04-08 Implement Date: 2019-04-08 For services related to genuine standard inquiry, procurement, translation, and other related services in China, please Contact Us

Price: $ 20.00

Out of stock

Basic Information

Standard Code: T/TSIA 002-2019

Standard Type: Group standards

Standard Status: Abolished

is_force_gb: no

CCS Name: Economic and cultural

ICS Name: Integrated Information Technology (IT)

Publish Date: 2019-04-08

Implement Date: 2019-04-08

Scope

Scope: This standard applies to service organizations engaged in the cybersecurity industry, including cybersecurity threat assessment agencies, cybersecurity detection and monitoring agencies, and related organizations providing cybersecurity engineering services. Software and information technology service industries, the internet sector, enterprises, public institutions, social organizations, and other organizations may also follow this management standard when conducting cybersecurity activities. The relevant work is carried out under the guidance of cybersecurity regulatory authorities and industry organizations. Main technical content: 1. Requirements for the management norms of third-party cybersecurity service organizations. This involves a comprehensive evaluation and certification of the management system, technical capabilities, and quality assurance capabilities in the implementation of cybersecurity engineering projects of service organizations. The assessment of the capabilities and direction of third-party cybersecurity service organizations is based on the specific requirements of national laws, regulations, and standards in the "Normative Reference Documents". After a comprehensive evaluation of the basic qualifications, technical capabilities, cybersecurity service capabilities, and organizational management levels of the applicant organization, the evaluation and certification authority grants corresponding competency qualifications. Cybersecurity service organizations are specifically divided into three directions: cybersecurity consulting, cybersecurity threat assessment, and cybersecurity engineering. 2. Supervision and review by regulatory authorities and industry organizations. Every year, regulatory authorities and industry organizations conduct supervision and review of cybersecurity service organizations. During the supervision and review process, organizations that fail to comply with relevant norms or commit serious violations