T/SIA 001-2017 Enterprise Personal Information Security Management Standards
T/SIA 001-2017 Enterprise Personal Information Security Management Standards
Basic Information
Scope
Scope: This standard is used to guide software and information technology service enterprises to safely and reasonably utilize personal information, standardize the processing activities of personal information in enterprises, and improve the level of personal information security management in enterprises. This standard is applicable to software and information technology service enterprises. Organizations and institutions such as public institutions and social groups can also refer to it. This standard can be used as the basis for evaluation and certification by third-party assessment agencies and certification bodies. Main technical content: This standard provides requirements for the basic requirements of personal information security management in enterprises, leadership roles, planning, support, processing processes, security management, monitoring, improvement, exceptions, and certification, etc.