T/CSAC 020-2025 Information and communication technology and service provider security requirements
T/CSAC 020-2025 Information and communication technology and service provider security requirements
Basic Information
Scope
Scope: This document specifies the security capabilities of six types of information and communication technology and service providers (system development, product supply, operation and maintenance services, integration construction, cloud services, and data services) in terms of management systems, organizational structures, and personnel, as well as all aspects of supply activities. This document is applicable to six types of information and communication technology and service providers (system development, product supply, operation and maintenance services, integration construction, cloud services, and data services) in standardizing their own security capability building. It is also applicable to network operators when selecting suppliers or conducting security evaluations, to standardizing the security protection capabilities of suppliers' supply chains, and to other types of information and communication technology and service providers when conducting supplier security capability building. Main technical content: 888