T/CECC 39-2025 Active Group standards

T/CECC 39-2025 Information security technology - Software supply chain management specification

Publish Date: 2025-06-30 Implement Date: 2025-06-30 For services related to genuine standard inquiry, procurement, translation, and other related services in China, please Contact Us

Price: $ 20.00

Out of stock

Basic Information

Standard Code: T/CECC 39-2025

Standard Type: Group standards

Standard Status: Active

is_force_gb: no

CCS Name: -

ICS Name: Comprehensive Application of Information Technology

Publish Date: 2025-06-30

Implement Date: 2025-06-30

Scope

Scope: This document specifies the basic requirements for software supply chain security management and lifecycle process management. This document is applicable to the security management of the entire lifecycle of the software supply chain; Main technical content: The main technical content includes an overview of the software supply chain security management model, and the core elements of management requirements: 1. Software supply chain security management requirements; (1) Software vendor service role requirements (2) Organizational capability requirements (3) System lifecycle management requirements (4) Software supply chain risk control requirements 2. Lifecycle process management of software supply chain security (1) Lifecycle model of the software supply chain (2) Requirement and planning phase (3) Design and development phase (4) Integration and testing phase (5) Delivery and deployment phase (6) Operation and maintenance phase