GB/T 20274.2-2008 Information security technology—Evaluation framework for information systems security assurance—Part 2:Technical assurance
GB/T 20274.2-2008 Information security technology—Evaluation framework for information systems security assurance—Part 2:Technical assurance
Basic Information
Scope
This part of GB/T 20274 establishes a framework for technical security of information systems and sets out guidelines and general principles for initiating, implementing, maintaining, evaluating, and improving the information security technology system within an organization. This part of GB/T 20274 defines and explains the technical system architecture capability level reflecting the organization's information security in the construction and evaluation of the information system security technology system, as well as the technical requirements for the organization's information system security. This part of GB/T 20274 is applicable to organizations initiating, implementing, maintaining, evaluating, and improving the information security technology system, and to all users, developers, and evaluators involved in information system security technology work.