T/CITIF 003-2023 Information technology services Data security capability model
T/CITIF 003-2023 Information technology services Data security capability model
Basic Information
Scope
Scope: This document provides a data security capability model and corresponding capability levels, defining three capability domains: service security assurance capability, data processing security capability, and service security delivery capability. This document is applicable to: 1) Information technology service providers who use this standard to build their own data security capabilities and conduct assessments and improvements; 2) Information technology service demanders who use this standard to evaluate the data security capabilities of information technology service providers; 3) Third-party organizations that conduct objective assessments of information technology service providers' data security capabilities based on this standard. Main technical content: This document provides a data security capability model and corresponding capability levels, defining three capability domains: service security assurance capability, data processing security capability, and service security delivery capability.