GB/T 32926-2016 English PDFUS$359.00 ยท In stock
Delivery: <= 3 days. True-PDF full-copy in English will be manually translated and delivered via email. GB/T 32926-2016: Information security technology -- Information security management specification for government information technology service outsourcing Status: Valid
Basic dataStandard ID: GB/T 32926-2016 (GB/T32926-2016)Description (Translated English): Information security technology -- Information security management specification for government information technology service outsourcing Sector / Industry: National Standard (Recommended) Classification of Chinese Standard: L80 Classification of International Standard: 35.040 Word Count Estimation: 18,119 Date of Issue: 2016-08-29 Date of Implementation: 2017-03-01 Regulation (derived from): National Standard Notice No. 14 of 2016 Issuing agency(ies): General Administration of Quality Supervision, Inspection and Quarantine of the People's Republic of China, Standardization Administration of the People's Republic of China GB/T 32926-2016: Information security technology -- Information security management specification for government information technology service outsourcing---This is a DRAFT version for illustration, not a final translation. Full copy of true-PDF in English version (including equations, symbols, images, flow-chart, tables, and figures etc.) will be manually/carefully translated upon your order. Information security technology - information security management specification for government information technology service outsourcing ICS 35.040 L80 National Standards of People's Republic of China Information Security Technology Government Information Technology Services Outsourcing Information Security Management Specification 2016-08-29 released 2017-03-01 implementation General Administration of Quality Supervision, Inspection and Quarantine of the People's Republic of China China National Standardization Management Committee released Directory Preface III Introduction IV 1 Scope 1 2 normative reference document 1 3 Terms and definitions 1 4 Summary 2 4.1 Service outsourcing information security management basic principles 2 4.2 Service Outsourcing Information Security Management Roles and Responsibilities 2 4.3 Service Outsourcing Information Security Management Model 3 5 planning preparation 3 5.1 Service Outsourcing Information Security Risk Assessment 3 5.2 Service Outsourcing Information Security Management Strategy and System 4 6 Institutional and Personnel Selection 4 6.1 Outsourcing services and personnel risk assessment 4 6.2 Service outsourcing contract 5 6.3 Service Outsourcing Information Security Management Plan 6 6.4 Information Security Confidentiality Agreement 6 6.5 Outsourcing service agencies filing 6 7 Operational oversight 7 7.1 Service Process Assessment Audit 7 7.2 Phase Result Delivery Verification 7 Improved and finished 8.1 Service Improvement 7 8.2 Service Exit 7 Appendix A (Normative Appendix) Service Outsourcing Basic Information Security Control 9 Reference 12 ForewordThis standard is drafted in accordance with the rules given in GB/T 1.1-2009. This standard is proposed by the National Information Security Standardization Technical Committee (SAC/TC260). The drafting of this standard. Beijing Information Security Evaluation Center, Ministry of Industry and Information Technology Institute of Electronic Science and Technology Information, Information Industry letter Safety Research Center, China Information Security Research Institute Co., Ltd. The main drafters of this standard. Liu Haifeng, Qian Xiubang, Liang Bo, Zhao Zhangjie, Liu Ying, Huoshanshan, Zhang Xiaomei, Wang Chunjia, Li Chenyang, Zhang Heng, Zhang Yi, Geng Guining.IntroductionWith the rapid development of economy and society, government departments in the construction and construction of service-oriented government, and continuously improve the ability and level of service for the people Process, more and more use and rely on information technology, and to carry out this information technology-related information technology consulting, information system set Into, operation and maintenance, security evaluation and other service outsourcing work. A large number of government information outsourcing work, both to solve the government administrative resources are limited and The contradiction between the increasing demand for public service efficiency and the improvement of the quality of government information engineering. But the government departments to enjoy the letter Information technology outsourcing to bring convenience at the same time, also faced with outsourcing service complex background, service personnel mobility, internal management is not standardized And other issues of information security risks, if the lack of information on service outsourcing information security management, will be the government departments Public, the people of production and life, and even the great loss of national security. This standard is used to regulate and guide government departments to purchase and use information technology services. This standard is through the process of outsourcing services to government departments To sort out, the establishment of the government information technology services outsourcing information security management model, in the clear service outsourcing information security management role And responsibility at the same time, the management activities will be divided into planning preparation, institutional and personnel selection, operation supervision, improvement completed four stages, respectively Information security management norms for the government departments of information technology services outsourcing security management to provide a reference. Government departments in the information technology service outsourcing information security management process, but also based on the standards of the standard requirements and basic control Measures, combined with their own service outsourcing project, put forward with the organization, personnel management, data management, information technology services, etc. Should be the control measures, phased, focused on the implementation of service outsourcing activities, so that the requirements of information security management can effectively Guide the different levels of government departments to the actual service outsourcing information security management, to enhance its service outsourcing information security level. Information Security Technology Government Information Technology Services Outsourcing Information Security Management Specification1 ScopeThis standard establishes the government information technology service outsourcing information security management model, put forward the government department information technology service outsourcing Management requirements for activities at all stages of the information security management lifecycle. This standard applies to government departments to purchase and use information technology services. Government departments to carry out secret information technology service outsourcing work, with reference to the State Secrecy Bureau relevant confidentiality regulations and standards, not in this standard Within range.2 normative reference documentsThe following documents are indispensable for the application of this document. For dated references, only the dated edition applies to this article Pieces. For undated references, the latest edition (including all modifications) applies to this document. Information security technical terminology GB/T 25069-2010 Information security technology - Basic requirements for information security management of government departments GB/T 29245-20123 terms and definitionsGB/T 25069-2010 Definitions and the following terms and definitions apply to this document. 3.1 Information technology services informationtechnologyservice The supply side provides services for the development and application of information technology, as well as the supply of information technology as a means to provide support for business activities service. [GB/T 29264-2012] Note. Common service forms are information technology consulting services, design and development services, information systems integration implementation services, operation and maintenance services, data processing and storage Services, operations services, digital content services, call center services and other information technology services. 3.2 Service outsourcing service Government departments to sign the contract, commissioned by other agencies to undertake information technology services business. 3.3 Outsourcing service organization organizationprovidingoutsourcedservice Service outsourcing to assume the information technology services institutions. 3.4 Service subcontracting servicesubcontraction Outsourcing services will be part of their own government departments to undertake information technology services once again entrusted to other institutions to complete the business conduct and management Model. ......Tips & Frequently Asked Questions:Question 1: How long will the true-PDF of GB/T 32926-2016_English be delivered?Answer: Upon your order, we will start to translate GB/T 32926-2016_English as soon as possible, and keep you informed of the progress. The lead time is typically 1 ~ 3 working days. The lengthier the document the longer the lead time.Question 2: Can I share the purchased PDF of GB/T 32926-2016_English with my colleagues?Answer: Yes. The purchased PDF of GB/T 32926-2016_English will be deemed to be sold to your employer/organization who actually pays for it, including your colleagues and your employer's intranet.Question 3: Does the price include tax/VAT?Answer: Yes. Our tax invoice, downloaded/delivered in 9 seconds, includes all tax/VAT and complies with 100+ countries' tax regulations (tax exempted in 100+ countries) -- See Avoidance of Double Taxation Agreements (DTAs): List of DTAs signed between Singapore and 100+ countriesQuestion 4: Do you accept my currency other than USD?Answer: Yes. If you need your currency to be printed on the invoice, please write an email to Sales@ChineseStandard.net. In 2 working-hours, we will create a special link for you to pay in any currencies. Otherwise, follow the normal steps: Add to Cart -- Checkout -- Select your currency to pay. |
