T/BJCSA 02-2022 Active

Scope: This standard specifies the basic qualifications, basic capabilities, and professional competence requirements that network space security service organizations (hereinafter referred to as "service organizations") should possess. This standard applies to service organizations conducting service capability evaluations and can be used as a basis for third-party certification agencies to evaluate the basic qualifications, basic capabilities, and professional competence of service organizations, providing a reference for users to select service organizations in maintaining information network security. Main technical content: The network space security service standard includes general evaluation requirements and professional competence evaluation requirements. The general evaluation requirements include basic qualifications and basic capabilities, such as institutional creditworthiness, financial creditworthiness, personnel status, office premises, operating time, business performance, management systems, contract management, confidentiality management, and professional tools, with specific requirements detailed in Chapter 6. The professional competence requirements vary across different directions, and the specific requirements for each direction are listed in Normative Appendices A–L. Service organizations are classified into Levels I, II, III, and IV based on their basic qualifications, basic capabilities, and professional competence, with Level IV being the highest and Level I being the lowest.