T/CITIF 004-2023

Scope: This document provides recommendations on the aspects of application unit, personnel safety, data security, system security, and service security involved in evaluating the security of face recognition applications. This document is applicable to face recognition application units conducting security assessments of face recognition applications, as well as to the planning, design, construction, and use of face recognition systems. Main technical content: Face recognition applications are widely used, and their security risks mainly come from four aspects: personnel, data, systems, and services. Application units need to equip themselves with corresponding management measures and technical means according to the nature of their own units and business characteristics. This document mainly provides recommendations for conducting security assessments of face recognition applications for application units such as government departments, high-tech enterprises, and scientific research institutes.