T/TSIA 001-2019 Abolished Group standards

T/TSIA 001-2019 Internet software operation security management specification

Publish Date: 2019-04-08 Implement Date: 2019-04-08 For services related to genuine standard inquiry, procurement, translation, and other related services in China, please Contact Us

Price: $ 20.00

Out of stock

Basic Information

Standard Code: T/TSIA 001-2019

Standard Type: Group standards

Standard Status: Abolished

is_force_gb: no

CCS Name: Software engineering

ICS Name: Integrated Information Technology (IT)

Publish Date: 2019-04-08

Implement Date: 2019-04-08

Scope

Scope: The key points and methods of safety management and technical measures proposed in this management standard can be used by network security-related regulatory departments and third-party network security service providers to carry out network security supervision and management and evaluation work. It can also serve as a reference basis for network operators of "connected software" to conduct self-inspections of their security systems. Main technical content: 1. Basic requirements: Network operators, as the main entities responsible for the operation of "connected software", including network managers, users, and network service providers who use others' networks to provide related services, should, as the first responsible parties for network security, comply with laws and regulations, adhere to business ethics, and be honest and trustworthy when conducting business and service activities. They should promote healthy and civilized online activities, fulfill their obligations to protect network security, establish network security management systems, strengthen network security technical protection measures, conduct regular network security assessments, implement personal information security protection mechanisms, strictly enforce the requirements of online real-name verification to confirm the authenticity and validity of relevant identity information, and ensure that the security-dedicated products and services used comply with national and industry standards and norms. When facing network security threat events, they should promptly handle and report them to regulatory authorities and industry organizations. The "Internet Software Operation Safety Management Standard" is based on the specific requirements of national laws and regulations and industry standards in the "Referenced Documents and Literature". When conducting safety assessments of "connected software", they should do so under the guidance of regulatory authorities or industry organizations.