https://www.clearsec.org/wikis/docs/%E6%A0%87%E5%87%86%E4%B8%8E%E8%A7%84%E8%8C%83/%E5%9B%A2%E6%A0%87/Recent content in 团标 on ClearSec WikiHugozh-cnSun, 11 Oct 2026 10:00:00 +0800https://www.clearsec.org/wikis/docs/%E6%A0%87%E5%87%86%E4%B8%8E%E8%A7%84%E8%8C%83/%E5%9B%A2%E6%A0%87/t-iseaa-001-2020-%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E7%AD%89%E7%BA%A7%E4%BF%9D%E6%8A%A4%E6%B5%8B%E8%AF%84%E9%AB%98%E9%A3%8E%E9%99%A9%E5%88%A4%E5%AE%9A%E6%8C%87%E5%BC%95/Sun, 11 Oct 2026 10:00:00 +0800https://www.clearsec.org/wikis/docs/%E6%A0%87%E5%87%86%E4%B8%8E%E8%A7%84%E8%8C%83/%E5%9B%A2%E6%A0%87/t-iseaa-001-2020-%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E7%AD%89%E7%BA%A7%E4%BF%9D%E6%8A%A4%E6%B5%8B%E8%AF%84%E9%AB%98%E9%A3%8E%E9%99%A9%E5%88%A4%E5%AE%9A%E6%8C%87%E5%BC%95/<blockquote> <p><strong>来源与版权</strong>：本页为本地转换稿（源文件 <code>团体标准\T ISEAA 001-2020 网络安全等级保护测评高风险判定指引.pdf</code>，共 39 页），版权归标准发布机构所有，仅供学习与测评工作参考，正式引用请核对官方发布版本。详见 <a href="https://www.clearsec.org/wikis/docs/%E6%A0%87%E5%87%86%E4%B8%8E%E8%A7%84%E8%8C%83/%E7%89%88%E6%9D%83%E5%A3%B0%E6%98%8E/">版权声明</a>。</p> </blockquote> <p>ICS 35.040 L 80</p> <p>ISEAA</p> <p>团 体 标 准</p> <p>T/ISEAA 001—2020</p> <h1 id="网络安全等级保护测评高风险判定指引">网络安全等级保护测评高风险判定指引</h1> <p>High risk assessment guidelines for classified protection evaluation of cyber security</p> <p>2020-11-05 发布 2020-12-01 实施</p> <p>中关村信息安全测评联盟 发布</p> <h2 id="目-次">目 次</h2> <p>前言 …………………… Ⅲ 引言 …………………… Ⅳ 1 范围 …………………… 1 2 规范性引用文件 …………………… 1 3 术语和定义 …………………… 1 4 缩略语 …………………… 2 5 概述 …………………… 2 5.1 判例概述 …………………… 2 5.2 判定原则 …………………… 2 5.3 场景释义 …………………… 3 6 高风险判例 …………………… 3 6.1 安全物理环境 …………………… 3 6.2 安全通信网络 …………………… 4 6.3 安全区域边界 …………………… 7 6.4 安全计算环境 …………………… 9 6.5 安全管理中心 …………………… 18 6.6 安全管理制度和机构 …………………… 19 6.7 安全管理人员 …………………… 19 6.8 安全建设管理 …………………… 20 6.9 安全运维管理 …………………… 21 附录 A（资料性附录） GB/T 22239—2019 中第三级安全要求与本文件判例对应关系 …………………… 24 附录 B（资料性附录） 高风险判例整改建议 …………………… 29 参考文献 …………………… 35</p>https://www.clearsec.org/wikis/docs/%E6%A0%87%E5%87%86%E4%B8%8E%E8%A7%84%E8%8C%83/%E5%9B%A2%E6%A0%87/t-iseaa-002-2021-%E4%BF%A1%E6%81%AF%E5%AE%89%E5%85%A8%E6%8A%80%E6%9C%AF-%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E7%AD%89%E7%BA%A7%E4%BF%9D%E6%8A%A4%E5%A4%A7%E6%95%B0%E6%8D%AE%E5%9F%BA%E6%9C%AC%E8%A6%81%E6%B1%82/Sun, 11 Oct 2026 10:00:00 +0800https://www.clearsec.org/wikis/docs/%E6%A0%87%E5%87%86%E4%B8%8E%E8%A7%84%E8%8C%83/%E5%9B%A2%E6%A0%87/t-iseaa-002-2021-%E4%BF%A1%E6%81%AF%E5%AE%89%E5%85%A8%E6%8A%80%E6%9C%AF-%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E7%AD%89%E7%BA%A7%E4%BF%9D%E6%8A%A4%E5%A4%A7%E6%95%B0%E6%8D%AE%E5%9F%BA%E6%9C%AC%E8%A6%81%E6%B1%82/<blockquote> <p><strong>来源与版权</strong>：本页为本地转换稿（源文件 <code>团体标准\T ISEAA 002-2021 信息安全技术 网络安全等级保护大数据基本要求.pdf</code>，共 28 页），版权归标准发布机构所有，仅供学习与测评工作参考，正式引用请核对官方发布版本。详见 <a href="https://www.clearsec.org/wikis/docs/%E6%A0%87%E5%87%86%E4%B8%8E%E8%A7%84%E8%8C%83/%E7%89%88%E6%9D%83%E5%A3%B0%E6%98%8E/">版权声明</a>。</p> </blockquote> <p>ICS 35.040</p> <p>L 80</p> <h1 id="团体标准">团　体　标　准</h1> <p>T/ISEAA 002—2021</p> <h1 id="信息安全技术">信息安全技术</h1> <h1 id="网络安全等级保护大数据基本要求">网络安全等级保护大数据基本要求</h1> <p>Information security technology—Big data baseline for classified protection of cybersecurity</p> <p>2021-04-29 发布　　2021-05-30 实施</p> <p>中关村信息安全测评联盟　发布</p> <h2 id="目次">目　次</h2> <p>前言 ······························································· Ⅲ</p> <p>引言 ······························································· Ⅳ</p> <p>1 范围 ····························································· 1</p> <p>2 规范性引用文件 ·················································· 1</p> <p>3 术语和定义 ······················································ 1</p> <p>4 概述 ····························································· 1</p> <p>5 第二级安全要求 ·················································· 2</p> <p>5.1 安全物理环境 ··················································· 2</p> <p>5.2 安全通信网络 ··················································· 3</p> <p>5.3 安全区域边界 ··················································· 3</p> <p>5.4 安全计算环境 ··················································· 3</p> <p>5.5 安全管理中心 ··················································· 5</p>https://www.clearsec.org/wikis/docs/%E6%A0%87%E5%87%86%E4%B8%8E%E8%A7%84%E8%8C%83/%E5%9B%A2%E6%A0%87/t-iseaa-003-2023-%E4%BF%A1%E6%81%AF%E5%AE%89%E5%85%A8%E6%8A%80%E6%9C%AF-%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E7%AD%89%E7%BA%A7%E4%BF%9D%E6%8A%A4%E5%8C%BA%E5%9D%97%E9%93%BE%E5%AE%89%E5%85%A8%E6%89%A9%E5%B1%95%E8%A6%81%E6%B1%82/Sun, 11 Oct 2026 10:00:00 +0800https://www.clearsec.org/wikis/docs/%E6%A0%87%E5%87%86%E4%B8%8E%E8%A7%84%E8%8C%83/%E5%9B%A2%E6%A0%87/t-iseaa-003-2023-%E4%BF%A1%E6%81%AF%E5%AE%89%E5%85%A8%E6%8A%80%E6%9C%AF-%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E7%AD%89%E7%BA%A7%E4%BF%9D%E6%8A%A4%E5%8C%BA%E5%9D%97%E9%93%BE%E5%AE%89%E5%85%A8%E6%89%A9%E5%B1%95%E8%A6%81%E6%B1%82/<blockquote> <p><strong>来源与版权</strong>：本页为本地转换稿（源文件 <code>团体标准\T／ISEAA 003-2023 《信息安全技术 网络安全等级保护区块链安全扩展要求》.pdf</code>，共 15 页），版权归标准发布机构所有，仅供学习与测评工作参考，正式引用请核对官方发布版本。详见 <a href="https://www.clearsec.org/wikis/docs/%E6%A0%87%E5%87%86%E4%B8%8E%E8%A7%84%E8%8C%83/%E7%89%88%E6%9D%83%E5%A3%B0%E6%98%8E/">版权声明</a>。</p> </blockquote> <p>ICS 35.030 CCS L 80 团体标准 T/ISEAA 003—2023</p> <p>信息安全技术 网络安全等级保护区块链安全扩展要求</p> <p>Information security technology— Blockchain system extension requirements for classified protection of cybersecurity</p> <p>2023-04-12 发布　　2023-07-01 实施</p> <p>中关村信息安全测评联盟　发布 中国标准出版社　出版</p> <h1 id="目次">目　次</h1> <p>前言 ··············································································· I 引言 ············································································· II 1 范围 ············································································ 1 2 规范性引用文件 ·································································· 1 3 术语和定义 ······································································· 1 4 缩略语 ············································································ 2 5 概述 ·············································································· 2 6 第一级安全扩展要求 ······························································ 3 　6.1 安全物理环境 ·································································· 3 　6.2 安全通信网络 ·································································· 3 　6.3 安全区域边界 ·································································· 3 　6.4 安全计算环境 ·································································· 3 7 第二级安全扩展要求 ······························································ 4 　7.1 安全物理环境 ·································································· 4 　7.2 安全通信网络 ·································································· 4 　7.3 安全区域边界 ·································································· 4 　7.4 安全计算环境 ·································································· 4 　7.5 安全运维管理 ·································································· 5 8 第三级安全扩展要求 ······························································ 5 　8.1 安全物理环境 ·································································· 5 　8.2 安全通信网络 ·································································· 5 　8.3 安全区域边界 ·································································· 6 　8.4 安全计算环境 ·································································· 6 　8.5 安全管理中心 ·································································· 7 　8.6 安全运维管理 ·································································· 7 9 第四级安全扩展要求 ······························································ 8 　9.1 安全物理环境 ·································································· 8 　9.2 安全通信网络 ·································································· 8 　9.3 安全区域边界 ·································································· 8 　9.4 安全计算环境 ·································································· 8 　9.5 安全管理中心 ·································································· 10 　9.6 安全运维管理 ·································································· 10 参考文献 ·········································································· 11</p>https://www.clearsec.org/wikis/docs/%E6%A0%87%E5%87%86%E4%B8%8E%E8%A7%84%E8%8C%83/%E5%9B%A2%E6%A0%87/t-iseaa-004-2023-%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E7%AD%89%E7%BA%A7%E4%BF%9D%E6%8A%A4%E5%AE%B9%E5%99%A8%E5%AE%89%E5%85%A8%E8%A6%81%E6%B1%82/Sun, 11 Oct 2026 10:00:00 +0800https://www.clearsec.org/wikis/docs/%E6%A0%87%E5%87%86%E4%B8%8E%E8%A7%84%E8%8C%83/%E5%9B%A2%E6%A0%87/t-iseaa-004-2023-%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E7%AD%89%E7%BA%A7%E4%BF%9D%E6%8A%A4%E5%AE%B9%E5%99%A8%E5%AE%89%E5%85%A8%E8%A6%81%E6%B1%82/<blockquote> <p><strong>来源与版权</strong>：本页为本地转换稿（源文件 <code>团体标准\T／ISEAA 004-2023 《网络安全等级保护容器安全要求》.pdf</code>，共 20 页），版权归标准发布机构所有，仅供学习与测评工作参考，正式引用请核对官方发布版本。详见 <a href="https://www.clearsec.org/wikis/docs/%E6%A0%87%E5%87%86%E4%B8%8E%E8%A7%84%E8%8C%83/%E7%89%88%E6%9D%83%E5%A3%B0%E6%98%8E/">版权声明</a>。</p> </blockquote> <p>ICS 35.040 CCS L 80</p> <h1 id="团体标准">团体标准</h1> <p>T/ISEAA 004—2023</p> <h1 id="网络安全等级保护容器安全要求">网络安全等级保护容器安全要求</h1> <p>Container security requirement for classified protection of cybersecurity</p> <p>2023-04-19 发布 2023-07-01 实施</p> <p>中关村信息安全测评联盟 发布 中国标准出版社 出版</p> <h1 id="目-次">目 次</h1> <p>前言 …… Ⅲ 引言 …… Ⅳ 1 范围 …… 1 2 规范性引用文件 …… 1 3 术语和定义 …… 1 4 缩略语 …… 2 5 容器集群及风险概述 …… 2 6 第一级安全要求 …… 4 7 第二级安全要求 …… 5 8 第三级安全要求 …… 6 9 第四级安全要求 …… 8 10 第五级安全要求 …… 9 附录 A（资料性） 容器安全场景与安全要求的选择和使用 …… 10 A.1 场景与安全要求 …… 10 A.2 要求项与等级测评对象关系 …… 13 参考文献 …… 16</p>https://www.clearsec.org/wikis/docs/%E6%A0%87%E5%87%86%E4%B8%8E%E8%A7%84%E8%8C%83/%E5%9B%A2%E6%A0%87/t-iseaa-005-2024-%E5%A4%A7%E6%A8%A1%E5%9E%8B%E7%B3%BB%E7%BB%9F%E5%AE%89%E5%85%A8%E4%BF%9D%E6%8A%A4%E8%A6%81%E6%B1%82/Sun, 11 Oct 2026 10:00:00 +0800https://www.clearsec.org/wikis/docs/%E6%A0%87%E5%87%86%E4%B8%8E%E8%A7%84%E8%8C%83/%E5%9B%A2%E6%A0%87/t-iseaa-005-2024-%E5%A4%A7%E6%A8%A1%E5%9E%8B%E7%B3%BB%E7%BB%9F%E5%AE%89%E5%85%A8%E4%BF%9D%E6%8A%A4%E8%A6%81%E6%B1%82/<blockquote> <p><strong>来源与版权</strong>：本页为本地转换稿（源文件 <code>T_ISEAA 005-2024 大模型系统安全保护要求.pdf</code>，共 17 页），版权归标准发布机构所有，仅供学习与测评工作参考，正式引用请核对官方发布版本。详见 <a href="https://www.clearsec.org/wikis/docs/%E6%A0%87%E5%87%86%E4%B8%8E%E8%A7%84%E8%8C%83/%E7%89%88%E6%9D%83%E5%A3%B0%E6%98%8E/">版权声明</a>。</p> </blockquote> <p>ICS 35.040</p> <p>CCS L 80</p> <p>T</p> <h1 id="团-体-标-准">团 体 标 准</h1> <p>T/ISEAA 005—2024</p> <h1 id="大模型系统安全保护要求">大模型系统安全保护要求</h1> <p>Security protection requirements for large model system</p> <p>2024-04-30 发布</p> <p>2024-06-01 实施</p> <p>中关村信息安全测评联盟　　发 布</p> <p>中国 标 准 出 版 社　　出 版</p> <h1 id="目次">目　　次</h1> <p>前言 ·····································································································Ⅲ</p> <p>引言 ·····································································································Ⅳ</p> <p>1　范围 ······································································································1</p> <p>2　规范性引用文件 ······················································································1</p> <p>3　术语和定义 ······························································································1</p> <p>4　概述 ······································································································1</p> <p>　　4.1　大模型系统架构 ··················································································1</p> <p>　　4.2　大模型系统安全 ··················································································2</p> <p>5　通用安全要求 ····························································································3</p> <p>　　5.1　物理环境 ···························································································3</p> <p>　　5.2　网络架构 ···························································································3</p>https://www.clearsec.org/wikis/docs/%E6%A0%87%E5%87%86%E4%B8%8E%E8%A7%84%E8%8C%83/%E5%9B%A2%E6%A0%87/t-iseaa-006-2024-%E5%A4%A7%E6%A8%A1%E5%9E%8B%E7%B3%BB%E7%BB%9F%E5%AE%89%E5%85%A8%E6%B5%8B%E8%AF%84%E8%A6%81%E6%B1%82/Sun, 11 Oct 2026 10:00:00 +0800https://www.clearsec.org/wikis/docs/%E6%A0%87%E5%87%86%E4%B8%8E%E8%A7%84%E8%8C%83/%E5%9B%A2%E6%A0%87/t-iseaa-006-2024-%E5%A4%A7%E6%A8%A1%E5%9E%8B%E7%B3%BB%E7%BB%9F%E5%AE%89%E5%85%A8%E6%B5%8B%E8%AF%84%E8%A6%81%E6%B1%82/<blockquote> <p><strong>来源与版权</strong>：本页为本地转换稿（源文件 <code>T_ISEAA 006-2024 大模型系统安全测评要求.pdf</code>，共 38 页），版权归标准发布机构所有，仅供学习与测评工作参考，正式引用请核对官方发布版本。详见 <a href="https://www.clearsec.org/wikis/docs/%E6%A0%87%E5%87%86%E4%B8%8E%E8%A7%84%E8%8C%83/%E7%89%88%E6%9D%83%E5%A3%B0%E6%98%8E/">版权声明</a>。</p> </blockquote> <p>ICS 35.040</p> <p>CCS L 80</p> <p>团体标准</p> <p>T/ISEAA 006—2024</p> <h1 id="大模型系统安全测评要求">大模型系统安全测评要求</h1> <p>Security evaluation requirements for large model system</p> <p>2024-04-30 发布　　　　2024-06-01 实施</p> <p>中关村信息安全测评联盟　　发　布</p> <p>中国标准出版社　　出　版</p> <p>中国标准出版社</p> <h1 id="目次">目　　次</h1> <p>前言 ···············································································Ⅲ</p> <p>引言 ···············································································Ⅳ</p> <p>1　范围 ············································································1</p> <p>2　规范性引用文件 ·······························································1</p> <p>3　术语和定义 ·····································································1</p> <p>4　概述 ·············································································1</p> <p>4.1　大模型系统架构 ·····························································1</p> <p>4.2　安全测评方法 ································································2</p> <p>5　通用安全测评要求 ·····························································3</p> <p>5.1　物理环境 ······································································3</p> <p>5.2　网络架构 ······································································3</p> <p>5.3　边界防护 ······································································4</p> <p>5.4　身份鉴别 ······································································5</p>https://www.clearsec.org/wikis/docs/%E6%A0%87%E5%87%86%E4%B8%8E%E8%A7%84%E8%8C%83/%E5%9B%A2%E6%A0%87/t-iseaa-007-2024-%E4%BF%A1%E6%81%AF%E5%AE%89%E5%85%A8%E6%8A%80%E6%9C%AF-%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E7%AD%89%E7%BA%A7%E4%BF%9D%E6%8A%A4%E5%A4%A7%E6%95%B0%E6%8D%AE%E5%AE%89%E5%85%A8%E6%B5%8B%E8%AF%84%E6%89%A9%E5%B1%95%E8%A6%81%E6%B1%82/Sun, 11 Oct 2026 10:00:00 +0800https://www.clearsec.org/wikis/docs/%E6%A0%87%E5%87%86%E4%B8%8E%E8%A7%84%E8%8C%83/%E5%9B%A2%E6%A0%87/t-iseaa-007-2024-%E4%BF%A1%E6%81%AF%E5%AE%89%E5%85%A8%E6%8A%80%E6%9C%AF-%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E7%AD%89%E7%BA%A7%E4%BF%9D%E6%8A%A4%E5%A4%A7%E6%95%B0%E6%8D%AE%E5%AE%89%E5%85%A8%E6%B5%8B%E8%AF%84%E6%89%A9%E5%B1%95%E8%A6%81%E6%B1%82/<blockquote> <p><strong>来源与版权</strong>：本页为本地转换稿（源文件 <code>团体标准\T／ISEAA 007-2024 《信息安全技术 网络安全等级保护大数据安全测评扩展要求》.pdf</code>，共 79 页），版权归标准发布机构所有，仅供学习与测评工作参考，正式引用请核对官方发布版本。详见 <a href="https://www.clearsec.org/wikis/docs/%E6%A0%87%E5%87%86%E4%B8%8E%E8%A7%84%E8%8C%83/%E7%89%88%E6%9D%83%E5%A3%B0%E6%98%8E/">版权声明</a>。</p> </blockquote> <p>ICS 35.030 CCS L 80</p> <p>团体标准</p> <p>T/ISEAA 007—2024</p> <p>信息安全技术 网络安全等级保护 大数据安全测评扩展要求</p> <p>Information security technology—Special evaluation requirements of big data system security for classified protection of cybersecurity</p> <p>2024-08-01 发布 2024-10-01 实施</p> <p>中关村信息安全测评联盟 发布 中国标准出版社 出版</p> <h1 id="目-次">目 次</h1> <p>前言 …… III 引言 …… IV 1 范围 …… 1 2 规范性引用文件 …… 1 3 术语和定义 …… 1 4 概述 …… 2 4.1 大数据等级保护对象测评 …… 2 4.2 系统调研 …… 4 4.3 测评对象确定 …… 5 4.4 测评指标确定 …… 8 4.5 测评实施关注点 …… 8 4.6 测评单元 …… 8 5 第二级安全测评扩展要求 …… 9 5.1 安全物理环境 …… 9 5.2 安全通信网络 …… 9 5.3 安全计算环境 …… 9 5.4 安全管理中心 …… 15 5.5 安全管理制度 …… 16 5.6 安全管理机构 …… 17 5.7 安全建设管理 …… 18 5.8 安全运维管理 …… 19 6 第三级安全测评扩展要求 …… 20 6.1 安全物理环境 …… 20 6.2 安全通信网络 …… 21 6.3 安全计算环境 …… 22 6.4 安全管理中心 …… 33 6.5 安全管理制度 …… 34 6.6 安全管理机构 …… 35 6.7 安全建设管理 …… 36 6.8 安全运维管理 …… 38 7 第四级安全测评扩展要求 …… 41 7.1 安全物理环境 …… 41 7.2 安全通信网络 …… 41</p>https://www.clearsec.org/wikis/docs/%E6%A0%87%E5%87%86%E4%B8%8E%E8%A7%84%E8%8C%83/%E5%9B%A2%E6%A0%87/t-iseaa-008-2024-%E4%BF%A1%E6%81%AF%E5%AE%89%E5%85%A8%E6%8A%80%E6%9C%AF-%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E7%AD%89%E7%BA%A7%E4%BF%9D%E6%8A%A4%E5%BA%94%E7%94%A8%E8%BD%AF%E4%BB%B6%E5%BC%80%E5%8F%91%E5%AE%89%E5%85%A8%E7%AE%A1%E7%90%86%E8%A7%84%E8%8C%83/Sun, 11 Oct 2026 10:00:00 +0800https://www.clearsec.org/wikis/docs/%E6%A0%87%E5%87%86%E4%B8%8E%E8%A7%84%E8%8C%83/%E5%9B%A2%E6%A0%87/t-iseaa-008-2024-%E4%BF%A1%E6%81%AF%E5%AE%89%E5%85%A8%E6%8A%80%E6%9C%AF-%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E7%AD%89%E7%BA%A7%E4%BF%9D%E6%8A%A4%E5%BA%94%E7%94%A8%E8%BD%AF%E4%BB%B6%E5%BC%80%E5%8F%91%E5%AE%89%E5%85%A8%E7%AE%A1%E7%90%86%E8%A7%84%E8%8C%83/<blockquote> <p><strong>来源与版权</strong>：本页为本地转换稿（源文件 <code>团体标准\T／ISEAA 008-2024 《信息安全技术 网络安全等级保护应用软件开发安全管理规范》.pdf</code>，共 29 页），版权归标准发布机构所有，仅供学习与测评工作参考，正式引用请核对官方发布版本。详见 <a href="https://www.clearsec.org/wikis/docs/%E6%A0%87%E5%87%86%E4%B8%8E%E8%A7%84%E8%8C%83/%E7%89%88%E6%9D%83%E5%A3%B0%E6%98%8E/">版权声明</a>。</p> </blockquote> <p>ICS 35.040 CCS L 80</p> <p>团　　体　　标　　准</p> <p>T/ISEAA 008—2024</p> <h1 id="信息安全技术">信息安全技术</h1> <h1 id="网络安全等级保护应用软件开发安全管理规范">网络安全等级保护应用软件开发安全管理规范</h1> <p>Information security technology—Specification of security management on developing of application software for classified protection of cybersecurity</p> <p>2024-09-02 发布 2024-11-01 实施</p> <p>中关村信息安全测评联盟　发布 中国标准出版社　出版</p> <h1 id="目次">目　次</h1> <p>前言 ………………………………………………………………………………………… Ⅲ 引言 ……………………………………………………………………………………… Ⅳ 1　范围 …………………………………………………………………………………… 1 2　规范性引用文件 ……………………………………………………………………… 1 3　术语和定义 …………………………………………………………………………… 1 4　缩略语 ………………………………………………………………………………… 2 5　概述 …………………………………………………………………………………… 2 　5.1　软件开发周期安全管理框架 …………………………………………………… 2 　5.2　管理要求组成描述 ……………………………………………………………… 3 6　第一、二级安全开发管理要求 ……………………………………………………… 3 　6.1　安全管理制度(SMS) …………………………………………………………… 3 　　6.1.1　制定和发布 ………………………………………………………………… 3 　　6.1.2　执行和修订 ………………………………………………………………… 3 　6.2　安全管理人员(SMP) …………………………………………………………… 4 　　6.2.1　岗位设置和人员配备 ……………………………………………………… 4 　　6.2.2　人员任职 …………………………………………………………………… 4 　　6.2.3　人员培训 …………………………………………………………………… 4 　　6.2.4　人员离岗 …………………………………………………………………… 4 　　6.2.5　第三方人员管理 …………………………………………………………… 4 　6.3　安全建设管理(SCM) …………………………………………………………… 4 　　6.3.1　安全需求管理 ……………………………………………………………… 4 　　6.3.2　安全设计管理 ……………………………………………………………… 4 　　6.3.3　安全开发管理 ……………………………………………………………… 4 　　6.3.4　安全测试管理 ……………………………………………………………… 5 　　6.3.5　安全发布管理 ……………………………………………………………… 5 　　6.3.6　安全交付管理 ……………………………………………………………… 5 　　6.3.7　环境建设管理 ……………………………………………………………… 5 　　6.3.8　开发工具管理 ……………………………………………………………… 5 　6.4　安全运维管理(SOM) …………………………………………………………… 6 　　6.4.1　开发环境运维管理 ………………………………………………………… 6 7　第三、四级安全开发管理要求 ……………………………………………………… 6 　7.1　安全管理制度(SMS) …………………………………………………………… 6 　　7.1.1　制定和发布 ………………………………………………………………… 6</p>https://www.clearsec.org/wikis/docs/%E6%A0%87%E5%87%86%E4%B8%8E%E8%A7%84%E8%8C%83/%E5%9B%A2%E6%A0%87/%E4%BF%A1%E6%81%AF%E5%AE%89%E5%85%A8%E6%8A%80%E6%9C%AF-%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E7%AD%89%E7%BA%A7%E4%BF%9D%E6%8A%A4%E4%BA%91%E8%AE%A1%E7%AE%97%E6%B5%8B%E8%AF%84%E6%8C%87%E5%BC%95-%E5%9B%A2%E4%BD%93%E6%A0%87%E5%87%86/Sun, 11 Oct 2026 10:00:00 +0800https://www.clearsec.org/wikis/docs/%E6%A0%87%E5%87%86%E4%B8%8E%E8%A7%84%E8%8C%83/%E5%9B%A2%E6%A0%87/%E4%BF%A1%E6%81%AF%E5%AE%89%E5%85%A8%E6%8A%80%E6%9C%AF-%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E7%AD%89%E7%BA%A7%E4%BF%9D%E6%8A%A4%E4%BA%91%E8%AE%A1%E7%AE%97%E6%B5%8B%E8%AF%84%E6%8C%87%E5%BC%95-%E5%9B%A2%E4%BD%93%E6%A0%87%E5%87%86/<blockquote> <p><strong>来源与版权</strong>：本页为本地转换稿（源文件 <code>团体标准\信息安全技术网络安全等级保护云计算测评指引.pdf</code>，共 15 页），版权归标准发布机构所有，仅供学习与测评工作参考，正式引用请核对官方发布版本。详见 <a href="https://www.clearsec.org/wikis/docs/%E6%A0%87%E5%87%86%E4%B8%8E%E8%A7%84%E8%8C%83/%E7%89%88%E6%9D%83%E5%A3%B0%E6%98%8E/">版权声明</a>。</p> </blockquote> <p>ICS xx.xxx L xx 团体标准 T/ISEAA XXX-2019</p> <p>信息安全技术 网络安全等级保护云计算测评指引</p> <p>Information security technology— Testing and evaluation guideline of cloud computing for classified production of cybersecurity</p> <p>（征求意见稿）</p> <p>20XX -XX-XX 发布　　20XX -XX-XX 实施</p> <p>中关村信息安全测评联盟　发布</p> <h1 id="目次">目　次</h1> <p>前　言 II 1　范围 1 2　规范性引用文件 1 3　术语和定义 1 4　概述 2 5　云计算等级测评实施 3 6　云计算等级测评问题分析 7 7　云计算等级测评结论分析 8 附录 A 被测系统基本信息表（样例） 10 附录 B 云计算平台服务　（样例） 12</p>