GB/T 38318-2019 English PDF

US$439.00 · In stock
Delivery: <= 5 days. True-PDF full-copy in English will be manually translated and delivered via email.
GB/T 38318-2019: Cyber security assessment guide for electric power system supervision and control
Status: Valid

Standard ID	USD	BUY PDF	Lead-Days	Standard Title (Description)	Status
GB/T 38318-2019	439	Add to Cart	5 days	Cyber security assessment guide for electric power system supervision and control	Valid

Similar standards

GB/T 40609   GB/T 40615   GB/T 40588   GB/T 45418   GB/T 15148   

Basic data

Standard ID: GB/T 38318-2019 (GB/T38318-2019)
Description (Translated English): Cyber security assessment guide for electric power system supervision and control
Sector / Industry: National Standard (Recommended)
Classification of Chinese Standard: F21
Classification of International Standard: 29.240.01
Word Count Estimation: 22,273
Date of Issue: 2019-12-10
Date of Implementation: 2020-07-01
Issuing agency(ies): State Administration for Market Regulation, China National Standardization Administration

GB/T 38318-2019: Cyber security assessment guide for electric power system supervision and control

---This is a DRAFT version for illustration, not a final translation. Full copy of true-PDF in English version (including equations, symbols, images, flow-chart, tables, and figures etc.) will be manually/carefully translated upon your order.
Cyber security assessment guide for electric power system supervision and control ICS 29.240.01 F21 National Standards of People's Republic of China Guidelines for Cyber Security Assessment of Power Monitoring Systems 2019-12-10 release 2020-07-01 implementation State Administration of Market Supervision Published by the National Standardization Management Committee

Contents

Foreword III Introduction IV 1 Scope 1 2 Normative references 1 3 Terms and definitions 1 4 Abbreviations 2 5 Assessment content 2 6 Safety assessment at each stage of the system life cycle 3 6.1 Evaluation Overview 3 6.2 Planning Phase 3 6.3 Design Phase 3 6.4 Implementation Phase 3 6.5 Operation and Maintenance Phase 3 6.6 Disposal Phase 3 7 Evaluation process and method 3 7.1 General requirements 3 7.2 Evaluation process 5 7.3 Evaluation method 5 7.4 Evaluation Considerations 6 8 Security Protection Technology Evaluation 6 8.1 Basic requirements 6 8.2 Infrastructure security 6 8.3 Architecture Security 7 8.4 Ontology safety 10 8.5 Trusted Security Immunity 12 9 Assessment of emergency backup measures 13 9.1 Redundant spares 13 9.2 Emergency response 13 9.3 Multiple Lines of Defense 14 10 Safety Management Evaluation 14 10.1 Safety Management System 14 10.2 Safety management of all personnel 14 10.3 Security management of all equipment and systems 15 10.4 Full Lifecycle Security Management 16

Foreword

This standard was drafted in accordance with the rules given in GB/T 1.1-2009. Please note that some elements of this document may involve patents. The issuer of this document is not responsible for identifying these patents. This standard was proposed by the China Electric Power Enterprise Federation. This standard is under the jurisdiction of the National Power System Management and Standardization Technical Committee for Information Exchange (SAC/TC82). This standard was drafted. China Electric Power Research Institute Co., Ltd., Global Energy Internet Research Institute Co., Ltd., National Energy Administration, China Power Grid Co., Ltd., China Southern Power Grid Co., Ltd., State Power Investment Corporation, China Huadian Group Co., Ltd., China Huadian Energy Group Corporation, China Three Gorges Corporation, East China Division of State Grid Corporation, State Grid Ningxia Electric Power Company, State Grid Jilin Province Electric Power Co., Ltd. Company, State Grid Shandong Province Electric Power Company, State Grid Chongqing Electric Power Company, State Grid Jiangsu Electric Power Co., Ltd., Nari Group Information and Communication Technology Branch Company, Beijing Kedong Electric Power Control System Co., Ltd., Electric Power Research Institute of Guangdong Power Grid Corporation. The main drafters of this standard. Zhang Tao, Li Ling, Ma Yuanyuan, Zheng Yi, Guo Xu, Fei Jiaxuan, Huang Xiuli, Gao Ke, Chen Xuehong, Wang Jingxin, Tao Hongzhu, Zhu Chaoyang, Lin Weimin, Liu Nan, Shan Songling, Yang Weiyong, Zhang Liang, Zhang Hongjie, Hu Kewei, Liu Yong, Ou Rui, Pei Pei, Ma Xiao, Tao Wenwei, Liang Zhiqiang, Yu Yong, Zhan Xiong, Liu Sen, Liu Ying, Zheng Xiaokun, Liang Xiao, Wang Jing, Zhang Ke, Li Yizhao, Chen Gang, Liu Xing, Liu Yin, Zhang Ye, Shi Congcong, Zhang Xiaojian.

Introduction

This standard is used in conjunction with GB/T 36572-2018. Guidelines for Cyber Security Assessment of Power Monitoring Systems

1 Scope

This standard specifies the assessment content of the network security assessment of the power monitoring system, the safety assessment and assessment at each stage of the system life cycle Processes and methods, safety protection technology assessment, emergency backup measures assessment, safety management assessment. This standard applies to the planning phase, design phase, implementation phase, operation and maintenance phase, and discard phase of the power monitoring system of various power companies. Network security protection assessment work.

2 Normative references

The following documents are essential for the application of this document. For dated references, only the dated version applies to this article Pieces. For undated references, the latest version (including all amendments) applies to this document. GB/T 9361 Computer field safety requirements GB 17859-1999 Computer Information System Security Protection Classification Standard GB/T 18336.2-2015 Information technology security technology Information technology security evaluation criteria Part 2. Security functions Component GB/T 20272-2006 Information security technology Operating system security technical requirements GB/T 20984-2007 Information Security Technology Information Security Risk Assessment Specification GB/T 21028-2007 Information security technology server security technical requirements GB/T 21050-2007 Information security technology network switch security technical requirements (evaluation assurance level 3) GB/T 22186-2016 Information security technology Security requirements for IC card chips with central processing unit GB/T 22239-2019 Basic requirements for information security technology network security level protection GB/T 22240-2008 Information Security Technology Information System Security Level Protection Rating Guide GB/T 25058-2010 Information Security Technology Information System Security Level Protection Implementation Guide GB/T 25068.3-2010 Information technology security technology IT network security Part 3. Inter-network communication using secure gateway safety protection GB /Z 25320 (all parts) Power system management and its information exchange Data and communication security GB/T 31509-2015 Information Security Technology Information Security Risk Assessment Implementation Guide GB/T 36572-2018 Guidelines for Network Security Protection of Power Monitoring System

3 terms and definitions

GB/T 36572-2018 and GB/T 20984-2007 and the following terms and definitions apply to this document. 3.1 Self-assessment The safety evaluation of the organization's power monitoring system implemented by the operating unit, and the dispatching agency within the dispatching jurisdiction (hereinafter referred to as "Within the scope of pipe control") Based on the results of self-assessment by each operating unit, the safety assessment of the power monitoring system within the scope of pipe control is organized and implemented. ......

Image     

Tips & Frequently Asked Questions:

Question 1: How long will the true-PDF of GB/T 38318-2019_English be delivered?

Answer: Upon your order, we will start to translate GB/T 38318-2019_English as soon as possible, and keep you informed of the progress. The lead time is typically 3 ~ 5 working days. The lengthier the document the longer the lead time.

Question 2: Can I share the purchased PDF of GB/T 38318-2019_English with my colleagues?

Answer: Yes. The purchased PDF of GB/T 38318-2019_English will be deemed to be sold to your employer/organization who actually pays for it, including your colleagues and your employer's intranet.

Question 3: Does the price include tax/VAT?

Answer: Yes. Our tax invoice, downloaded/delivered in 9 seconds, includes all tax/VAT and complies with 100+ countries' tax regulations (tax exempted in 100+ countries) -- See Avoidance of Double Taxation Agreements (DTAs): List of DTAs signed between Singapore and 100+ countries

Question 4: Do you accept my currency other than USD?

Answer: Yes. If you need your currency to be printed on the invoice, please write an email to Sales@ChineseStandard.net. In 2 working-hours, we will create a special link for you to pay in any currencies. Otherwise, follow the normal steps: Add to Cart -- Checkout -- Select your currency to pay.