T/GDIS 002-2023 Internet Application System Security Maturity Model for Information Security Technology

Scope

Main technical content: The Internet application system security capability maturity model is composed of three dimensions: capability elements, capability maturity levels, and capability building processes. Capability elements include institutional construction, system processes, technical tools, and personnel capabilities. The capability maturity levels are divided into five grades, including: Level 1 is the basic construction level, Level 2 is the standard protection level, Level 3 is the integrated control level, Level 4 is the comprehensive coordination level, and Level 5 is the intelligent optimization level. The capability building process includes core protection object security and general security. Core protection object security includes five process categories: communication security, network boundary security, computing environment security, data security, and personal information security. General security includes five process categories: security planning and architecture, personnel management and training, physical and environmental security, monitoring and early warning, and emergency response, and supply chain security. Specific requirements are described in Chapters 6 and 7. According to the different levels of capability requirements, the specific requirements for each direction are described in the standard appendices A-C. Based on the maturity of the organization's Internet application system security capability, it is divided into five levels: Level 1, Level 2, Level 3, Level 4, and Level 5, with Level 5 being the highest and Level 1 being the lowest.

Development Information

Related Standards