GB/T 28449-2012 Information security technology—Testing and evaluation process guide for classified protection of information system security

Scope

This standard specifies the evaluation process for the security level protection assessment of information systems (hereinafter referred to as "security level assessment"), and provides guidance on the activities, tasks, and input/output products of each task in the security level assessment.
This standard is applicable to security testing and evaluation conducted by assessment institutions, the competent departments of information systems, and the units responsible for the operation and use of information systems to assess the security level protection status of information systems.

Development Information

Superseded by the following standards

Referenced Standards

Related Standards