T/ZSIA 0001-2023 Audit System Technology Specification for Access Control Audit
T/ZSIA 0001-2023 Audit System Technology Specification for Access Control Audit
Basic Information
Scope
Scope: This document specifies the basic requirements, functional requirements, security requirements, and technical innovation capabilities for access control audit systems, as well as quality assurance requirements. This document is applicable to the design, development, and testing of access control audit system products. Main technical content: 5 Functional requirements 5.1 General requirements 5.2.1 User management 5.2.2 Asset management 5.2.3 Permission management 5.3.1 Single sign-on 5.3.2 Automatic password change 5.4.1 Character audit 5.4.2 Graphic audit 5.4.3 Database audit 5.4.4 File transfer audit 5.4.5 Operation audit retrieval 6 Security requirements 6.1 System security requirements 6.1.1 High-risk command permission control 6.1.2 Identity security 6.1.3 National encryption token authentication 6.1.4 Audit security 6.1.5 System security 6.2 Application and extensibility requirements 6.2.1 Application security 6.2.2 WEB application security 6.2.3 Integration capability requirements 6.2.4 Deployment extensibility requirements 7 Guidance document requirements