T/ZJAF 13.7-2023 Public video resources Part 7: Network and data security requirements
T/ZJAF 13.7-2023 Public video resources Part 7: Network and data security requirements
Basic Information
Scope
Scope: Applicable to the overall security planning, design, deployment, implementation, inspection and acceptance, and safe operation of public video resource transmission network construction; Main technical content: This document specifies the overall technical requirements for public video resource networks and data security, the requirements for cross-level safe sharing and exchange of public video resources in departments/industries, as well as the security technical requirements for facility security, network boundary security, application security, user security, authorization security, data security, and security management centers. 1. Facility Security 1.1 General Requirements 1.1.1 Personnel Requirements: a) Public video resource managers are responsible for the safety management of public video resource-related facilities; b) Relevant daily operation and maintenance work can be carried out by operation and maintenance service personnel designated by public video resource managers, who shall comply with the provisions of T/ZJAF 13.3—2023; c) When implementing public video resource construction projects, public video resource operators shall ensure that the online equipment is free from high-risk vulnerabilities, weak passwords, viruses, and other security risks in accordance with the relevant requirements of this chapter; d) When using public video resource facilities, public video resource users shall not engage in unauthorized behaviors such as private connection of equipment, unauthorized external connections, or removal of related facilities from computer rooms or office locations in accordance with the requirements of this document. 1.2 Directory Management: a) It shall be able to register, detect, mark, and manage equipment assets. A directory-based or tabular equipment asset list shall be established and regularly updated; b) The asset lists of non-camera equipment types (such as management servers, storage servers, network video re