T/ZOSA 002-2018 Active Group standards

T/ZOSA 002-2018 Central enterprise mobile office security technology requirements for protecting trade secrets

Publish Date: 2018-08-03 Implement Date: 2018-08-03 For services related to genuine standard inquiry, procurement, translation, and other related services in China, please Contact Us

Price: $ 20.00

Out of stock

Basic Information

Standard Code: T/ZOSA 002-2018

Standard Type: Group standards

Standard Status: Active

is_force_gb: no

CCS Name: Communication equipment

ICS Name: Information technology, office machinery and equipment (vocabulary)

Publish Date: 2018-08-03

Implement Date: 2018-08-03

Scope

Scope: This standard is based on the security risks of central enterprises' trade secrets in mobile office, and proposes an overall security framework for the protection of trade secrets in mobile office of central enterprises, stipulating the technical requirements that mobile terminals, channels, mobile access, and server sides should meet. This standard applies to the security design, product development, engineering implementation, and operation management of central enterprises' trade secret mobile office systems, and can also be used as a basis for security evaluation of central enterprises' trade secret mobile office systems. Confidential mobile office systems shall be implemented in accordance with the regulations of the National Security Administration; Main technical content: 1. Overall design: This standard mainly specifies the security protection of mobile office systems on the mobile terminal side and the security protection of data transmission in mobile networks. 2. Mobile terminal security function requirements: Mobile terminal security requirements, including system security requirements, application security requirements, and security control requirements. 3. End-to-end security requirements: Including system access security, data transmission security, network isolation, and user management. 4. Cloud security requirements: Including cloud security capability requirements, cloud security management requirements, and cloud-based trade secret storage and usage security requirements.