T/CSAC 001-2023 Active Group standards

T/CSAC 001-2023 Network Target Range - A Security Assessment Method Based on Technical and Tactical Models

T/CSAC 001-2023

Publish Date: 2023-06-16 Implement Date: 2023-06-16 For services related to genuine standard inquiry, procurement, translation, and other related services in China, please Contact Us

Price: $ 20.00

Download

Basic Information

Standard Code: T/CSAC 001-2023

Standard Type: Group standards

Standard Status: Active

is_force_gb: no

CCS Name: -

ICS Name: Comprehensive Application of Information Technology

Publish Date: 2023-06-16

Implement Date: 2023-06-16

Pages: 30 pages

Scope

Scope: This document describes the method of conducting security assessments on information systems, security products, and other objects in a cyber range environment based on the attack tactics model, including basic concepts, process requirements, and evaluation methods. This document is applicable to guiding assessors in conducting security assessments based on the cyber range and in accordance with the attack tactics model; Main technical content: The "Cyber Range - Security Assessment Method Based on Attack Tactics Model" (T/CSAC 001—2023) describes the method of conducting security assessments on information systems, security products, and other objects in a cyber range environment based on the attack tactics model, including basic concepts, process requirements, and evaluation methods. Specifically, based on the ATT&CK model, it provides guidance for organizations to conduct assessments from the full process of formulating a security assessment plan, establishing an assessment implementation team, setting up an assessment environment, constructing attack tactics, systematically simulating attacks, executing assessments, quantitatively evaluating results, and determining outcomes.