T/TSIA 004-2023 Active

Scope: The key points and methods of safety management and technical measures proposed in this management standard can be used by network security-related regulatory departments and third-party network security service agencies to carry out network security supervision and management and evaluation work, and can serve as a reference basis for network operators of "online software" to conduct self-inspections of safety. Main technical content: 1. Basic requirements: Network operators, as the main operators of "online software", including network managers, users, and network service providers who use others' networks to provide related services, as the first responsible persons for network security, must comply with laws and regulations, abide by business ethics, be honest and trustworthy, promote healthy and civilized online activities, fulfill their obligations to protect network security, establish network security management systems, strengthen network security technical protection measures, conduct regular network security assessments, implement personal information security protection mechanisms, and strictly enforce the requirements for online real-name verification to confirm the authenticity and validity of relevant identity information. The security dedicated products and services adopted shall comply with national and industry standards and norms. When network security threat events occur, they shall promptly deal with them and report them to regulatory authorities and industry organizations. The "Internet Software Operation Safety Management Standard" is based on the specific requirements of national laws and regulations and national standards in the "References and Documents Cited", and the "online software" shall be evaluated under the guidance of regulatory authorities or industry organizations when conducting safety assessments. For any safety risks identified, they shall promptly rectify them until the relevant safety risks are eliminated. 2. Safet