GB/T 25068.1-2020 Active

This part of GB/T 25068 specifies an overview of network security and related definitions, defines and describes concepts related to network security, and provides management guidance on network security (the network security in this part applies to the security of information transmitted through communication links, device security, and the security of management activities related to devices, applications/services, and end users).
The users of this part include anyone who owns, operates, or uses a network, including senior managers and other non-technical managers or users, as well as managers and administrators who have specific responsibilities for information security and/or network security, network operations, or who are responsible for formulating the organization's overall security plans and strategies. In addition, it includes all those involved in the planning, design, and implementation of network security architectures.
This part also includes the following:
——Provides guidance on identifying and analyzing network security risks and defining network security requirements based on the above analysis;
——Provides an overview of supporting network technology security architectures and related technical controls, as well as technical and non-technical controls that are not only applicable to networks;
——Introduces how to implement high-quality network technology security architectures, as well as risk, design, and control elements related to typical network scenarios and network "technical" fields (discussed in detail in other parts of GB/T 25068), and briefly describes issues related to the implementation and operation of network security controls, as well as issues related to continuous supervision and review of their implementation.
This part provides an overview of the GB/T 25068 series of standards and guidance on other parts.