T/GDCSA 006-2021 Active Group standards

T/GDCSA 006-2021 Cybersecurity Testing Capability (Team) Evaluation Specification

Publish Date: 2021-08-30 Implement Date: 2021-08-31 For services related to genuine standard inquiry, procurement, translation, and other related services in China, please Contact Us

Price: $ 20.00

Out of stock

Basic Information

Standard Code: T/GDCSA 006-2021

Standard Type: Group standards

Standard Status: Active

is_force_gb: no

CCS Name: Information processing technology

ICS Name: Integrated Information Technology (IT)

Publish Date: 2021-08-30

Implement Date: 2021-08-31

Scope

Scope: This document stipulates the evaluation principles of the capabilities of network security testing teams, team management, evaluation indicators, evaluation methods, and annual review requirements. This document is applicable to third-party institutions conducting capability evaluations of network security attack and defense testing teams. It can serve as a reference for service demanders selecting teams, and also provide guidance for network security attack and defense testing teams to improve their own capabilities. Main technical content: The evaluation of network security testing team capabilities is based on the principles of voluntariness, openness, fairness, and impartiality. It is conducted through five major evaluation indicators of network security testing team capabilities, including basic requirements evaluation, management system requirements evaluation, capability requirements evaluation, practical experience evaluation, and performance award evaluation. According to the total score assigned to each evaluation indicator, the total score is calculated by adding the scores of each evaluation content. The evaluation grades of network security testing team capabilities are divided into one-star level, two-star level, three-star level, four-star level, and five-star level. The one-star level is the lowest, and the five-star level is the highest.