T/SIA 008.2-2018 Ready-to-use software product (RUSP) security quality evaluation standard - Part 2: Guidelines for security quality requirements and classification levels
T/SIA 008.2-2018 Ready-to-use software product (RUSP) security quality evaluation standard - Part 2: Guidelines for security quality requirements and classification levels
Basic Information
Scope
Scope: This part of the standard defines: a) The safety quality requirements and quality level classification principles for ready-to-use software products (RUSPs). b) This part is the second part of the safety quality evaluation standard for ready-to-use software products (RUSPs). c) This part is based on the software quality requirements of GB/T 25000.51/ISO/IEC 25051, and combines the T/SIA 008.1-2018 software security quality model with the Information Technology Security Assessment Criteria (GB/T 18336.2, GB/T 18336.3), the grade protection evaluation requirements (GB/T 28448-2012), and the "Code Security Audit Specification", further clearly elaborating the specific requirements of various attributes and sub-attributes of the safety quality of ready-to-use software products, and providing a guide for the safety quality evaluation of RUSP software products. d) This part is used to guide the safety quality evaluation of ready-to-use software products (RUSPs). Main technical content: 1. Scope 2. Normative references 3. Terms and definitions, abbreviations 3.1 Terms and definitions 3.2 Abbreviations 4. Safety quality requirements for RUSPs 4.1 Safety attribute requirements for RUSPs 4.2 Product description requirements 4.3 User document set requirements 5. Guidelines for RUSP safety quality level classification 5.1 Principles for RUSP software safety quality level classification 5.2 Description of RUSP software safety quality levels 6. RUSP safety quality standard users 7. Annexes 8. References