T/SZAS 54-2022 Quality Classification and "Leader" Evaluation Requirements for Remote Medical Online Application Services System Security Assessment (Penetration Testing)
T/SZAS 54-2022
Basic Information
Scope
Scope: This document specifies the evaluation indicators and methods, as well as the grading system, for assessing the security of remote medical online application service systems (penetration testing) and their compliance with corporate standards. This document is applicable to the quality evaluation and corporate standard level assessment of transportation digital infrastructure systems. Relevant institutions may refer to it when conducting quality grading and corporate standard level assessments, evaluating "leaders" in the industry, and conducting related certifications. Enterprises may also use this document as a reference when formulating corporate standards. Main Technical Content: 2. Evaluation Indicator System: Chapter 4 of this standard mainly elaborates on the basic requirements, evaluation indicator classification, and evaluation indicator system framework of the "leader" standard for the security evaluation of remote medical online application service systems. The evaluation indicators include basic indicators, core indicators, and innovative indicators. The basic indicators involve the security evaluation capabilities of remote medical online application service systems, including system analysis, threat analysis, and test plan formulation. The core indicators are selected based on the advanced level required by the general standard, which is achieved by the top 20% mainstream enterprises in China, and include the evaluation capabilities of identity authentication, access authorization, and client-side security for remote medical online application service systems. Since there are currently no relevant standards in China or abroad, the core indicator items cannot be compared with those in related domestic or international standards. The innovative indicators involve the security evaluation capabilities of remote medical online application service systems, including password security evaluation. 3. Evaluation Methods: Chapter 5 of this standard main