|
US$199.00 · In stock
Delivery: <= 3 days. True-PDF full-copy in English will be manually translated and delivered via email.
CNCA CCIS-2023: (Key network equipment and network security-specific products Security certification implementation rules (released))
Status: Valid CNCA CCIS: Evolution and historical versions
| Standard ID | Contents [version] | USD | STEP2 | [PDF] delivered in | Standard Title (Description) | Status | PDF |
| CNCA CCIS-2023 | English | 199 |
Add to Cart
|
3 days [Need to translate]
|
(Key network equipment and network security-specific products Security certification implementation rules (released))
| Valid |
CNCA CCIS-2023
|
| CNCA CCIS-2018 | English | 459 |
Add to Cart
|
4 days [Need to translate]
|
(Implementation rules for security certification of critical network equipment and network security products)
| |
CNCA CCIS-2018
|
Standard similar to CNCA CCIS-2023
Basic data | Standard ID | CNCA CCIS-2023 (CNCA-CCIS-2023) | | Description (Translated English) | (Key network equipment and network security-specific products Security certification implementation rules (released)) | | Sector / Industry | China Compulsory Certification (CCC) Implementation Rules | | Word Count Estimation | 10,135 | | Date of Issue | 2023-08-08 | | Date of Implementation | 2023-08-08 | | Issuing agency(ies) | China National Accreditation Administration for Certification and Accreditation | | Summary | This standard is formulated in accordance with the "Cybersecurity Law of the People's Republic of China" and the Certification and Accreditation Regulations of the People's Republic of China, and stipulates the basic principles and requirements for product certification in the "Catalogue of Critical Network Equipment and Network Security Special Products". This standard applies to key network equipment and network security-specific products issued by the Cyberspace Administration of China, the Ministry of Industry and Information Technology, the Ministry of Public Security, and the National Certification and Accreditation Administration Commission. Certification agencies shall prepare certification implementation details in accordance with the requirements of this standard and implement them together with this standard. | CNCA CCIS-2018: (Implementation rules for security certification of critical network equipment and network security products)
---This is a DRAFT version for illustration, not a final translation. Full copy of true-PDF in English version (including equations, symbols, images, flow-chart, tables, and figures etc.) will be manually/carefully translated upon your order.
(Implementation rules for security certification of critical network equipment and network security products)
Number. CNCA -CCIS-2018
Network critical equipment and network security products
Safety certification implementation rules
Issued by the National Certification and Accreditation Administration Commission
table of Contents
1.Scope of application...4
2.Authentication mode...4
3.Basic links of certification...4
3.1 Certification application and acceptance...4
3.2 Document review...4
3.3 Type test commission and implementation...4
3.4 Factory inspection...4
3.5 Evaluation and approval of certification results...4
3.6 Post-certification supervision...4
4.Certification implementation...4
4.1 Certification process...4
4.2 Certification application and acceptance...5
4.3 Document review...7
4.4 Type test commission and implementation...7
4.5 Factory inspection...8
4.6 Evaluation and approval of certification results...9
4.7 Post-certification supervision...9
5.Certification time limit...10
6.Certification...11
6.1 Validity of the certificate...11
6.2 Change of certification...11
6.3 Extension of the products covered by the certificate...11
6.4 Suspension, cancellation and withdrawal of certification...12
7.Use of certification mark...12
7.1 The style of the certification mark...12
7.2 Use of certification mark...12
7.3 Adding methods...12
7.4 Location of logo...13
Annex 1...14
Annex 2...16
Annex 3...17
1.Scope of application
These rules are based on the "Cyber Security Law of the People's Republic of China", "The People's Republic of China
National Certification and Accreditation Regulations, which stipulate the development of key network equipment and network security
Use the basic principles and requirements of product safety certification.
The key network equipment and special network security products applicable to this rule shall comply with
"National Internet Information Office, Ministry of Industry and Information Technology, Ministry of Public Security,
Regarding the release of the "Critical Network Equipment and Network Security Special Product Catalog" (First
The corresponding scope requirements in the Announcement (Joint Announcement No. 1,.2017)
Description (see Annex 1 for details).
The safety certification standards are implemented in accordance with the requirements of the relevant competent authorities.
2.Authentication mode
Type test factory inspection and supervision after certification
3.The basic link of certification
3.1 Certification application and acceptance
3.2 Document review
3.3 Type test commission and implementation
3.4 Factory inspection
3.5 Evaluation and approval of certification results
3.6 Post-certification supervision
4.Certification implementation
4.1 Certification process
The certification client applies for certification to the certification body, and the certification body receives the certification
After the trustee’s certification application, review the application materials and select the certification trustee
The selected laboratory arranges the testing tasks and informs the certification client to take samples according to the requirements
Measurement. The laboratory conducts testing in accordance with relevant standards and/or technical specifications,
Submit the test report to the certification body after the test. The certification body has passed the inspection report
After that, the certification body organizes factory inspections when necessary. Certification bodies for type testing,
The result of factory inspection is to make a certification decision, and after the certification decision is qualified,
The trustee issues a certificate. The certification body organizes regular supervision of the certified products.
4.2 Certification application and acceptance
The certification client submits a certification application to the certification body and submits relevant information as required
The certification body conducts a preliminary review of the materials and determines that the materials submitted by the certification client meet the requirements
After requesting, accept the application.
4.2.1 Division of authentication units
Apply for certification according to product model/version, if the key parts of the product are the same, it can be used as
When a unit applies for certification, the certification body shall make provisions on the key parts of the product according to the certification requirements.
When applying for certification with more than one model/version for the same certification unit,
The certification principal shall submit a description of the differences between models/versions in the same certification unit and related test reports.
4.2.2 Requirements for application materials
The certification principal shall submit at least the following materials when applying for safety certification.
1) Application basic information.
Application for certification;
Statement of certification client;
Relevant legal status certification materials (copy);
Documents related to the quality system.
2) Relevant technical index parameter declaration and supporting materials (according to the content in the "Scope" of Annex 1).
3) Product related instructions.
Chinese product function manual and/or user manual;
Applicability of certification standards;
List of main technical personnel in product development;
Product testing technical personnel status table;
List of main equipment used in product testing;
Chinese nameplate and warning signs;
Explanation of differences between models/versions in the same certification unit and related test reports (if applicable);
Product password testing certificate (if applicable).
4) Documents related to safety assurance requirements.
Configuration management;
Delivery and operation;
Development;
Guiding documents;
Testing.
5) Documents related to safety functions.
4.5.1 Audit content
The contents of factory inspection include information security assurance capability, quality assurance capability, and product consistency inspection.
4.5.1.1 Information security assurance capability
Inspectors sent by the certification body to manufacturers and production enterprises in accordance with Annex 2 (information
Basic requirements for safety assurance capabilities) implementation of audits (when the certification is based on national standards covering
When security assurance capability is required, it shall be implemented in accordance with the corresponding national standards).
4.5.1.2 Quality Assurance Ability
Inspectors sent by the certification body to the production enterprises in accordance with Annex 3 (Quality Assurance Ability
Basic requirements) and supplementary inspection requirements established by the certification body.
4.5.1.3 Product consistency
During the factory inspection, the consistency check of the products applying for certification shall be carried out on the production site. Focus on checking the following.
1) The nameplate of the certified product, the product marked on the package and the product displayed during operation
Whether the product name, model/version number and the content indicated on the type test report are consistent;
2) The software and hardware used for the certified product should be consistent with the samples that have passed the type test;
3) Whether the non-certified products are labeled with certification marks in violation of regulations.
4.5.2 Factory inspection time
The certification body shall arrange factory inspections according to certification implementation needs. According to the
The number of units applying for certification products shall be determined, and the manufacturer’s and production enterprises’
The scale and safety level of the product are generally 2 to 6 man-days per site.
4.6 Evaluation and approval of certification results
The certification body is responsible for the comprehensive evaluation of type tests and factory inspection results, etc.
The certification decision is made, and if the certification decision is passed, the certification body shall issue the certification to the client
Certification certificate (each certification unit issues a certification certificate). If the certification has been decided
It is found that items that do not meet the certification requirements are found in the process, and a deadline (not more than 3 months) is allowed for rectification.
After the rectification is completed as scheduled, the certification body shall adopt appropriate methods to confirm the rectification results,
Re-execute the certification decision process.
4.7 Post-certification supervision
4.7.1 Frequency of supervision
The frequency of supervision is generally once a year. When there are special regulations, the certification body can adjust
Adjust the frequency of supervision. If necessary, the certification body may supervise without prior notice.
The frequency of supervision can be increased if one of the following situations occurs.
1) When the certified product has serious quality problems, or when the user submits a complaint and it is verified that the certificate holder is responsible;
2) When the certification body has sufficient reasons to question the compliance of the certified product with the specified standard requirements;
3) There is sufficient information to indicate that the manufacturer,
When there are changes in parts, quality management system, etc., which may affect product quality.
4.7.2 Contents of supervision
The post-certification supervision is carried out by means of factory inspection, mainly for information security
Inspections on barriers, consistency of certified products and quality assurance capabilities. If necessary
Take samples and send them to the laboratory for testing. When sampling testing is needed, follow the requirements of 4.4.1.1
Implement sampling. The test items in the initial certification application can be used as the test during supervision
For projects, the certification body can conduct part or all of the project testing according to the specific conditions. kind
The testing of products is generally completed by the testing laboratory designated by the certification body within 20 working days.
4.7.3 Evaluation of surveillance results after certification
After the supervision and re-examination pass, the certification certificate and the certification mark can be maintained.
Corrective actions should be completed within 3 months for non-conformities found during the supervisory review.
After the expiry date, the certification certificate will be revoked, the certification mark will be stopped, and an announcement will be made.
5.Certification time limit
The time limit for certification is from the date the application is officially accepted to the issuance of the certification certificate
The working days that actually occurred are generally within 90 working days. The rectification time is not included.
6.Certification certificate
6.1 Validity of the certificate
The certificate is valid for 5 years. During the validity period, through the annual inspection of the certified products
Conduct supervision to ensure the validity of the certification.
6.2 Change of certification
6.2.1 Application for change
The certified product, if its manufacturer, manufacturer, certificate holder, etc. issue
When there is a change, an application for change shall be submitted to the certification body.
6.2.2 Evaluation and approval of change application
The certification body conducts document review based on the content of the change and the information provided.
Type tests and/or factory inspections will be arranged from time to time, and a change certificate will be issued after the certification evaluation is passed.
6.2.3 Validity period of the certificate
After the certificate is changed, its validity period is the same as the original certificate.
6.3 Extension of products covered by the certificate
6.3.1 Application for product extension covered by the certificate
When the certificate holder needs to increase the certification scope of the certified product,
An extension application should be submitted to the certification body, and the extension between the extended product and the original certified product
The difference description.
6.3.2 Evaluation and approval of product extension covered by the certificate
The certification body shall check the consistency of the extended product with the original certified product, and confirm the original certification
To verify the effectiveness of the results of the extended product, supplementary type tests should be conducted for differences when necessary
And/or factory inspection, and issue a certificate separately according to the requirements of the certificate holder
Certificate or renew the certificate.
6.3.3 Validity period of the certificate
After the certificate is extended, its validity period is the same as the original certificate.
6.4 Suspension, cancellation and withdrawal of certification certificates
Refer to the "Rules for the Cancellation, Suspension and Revocation of Compulsory Product Certification Certificates"
Require execution. During the suspension of the certification certificate and after the cancellation and revocation of the certification certificate,
Institutions must not continue to use certificates.
7.Use of certification mark
7.1 The style of the certification mark
7.2 Use of certification mark
The certification mark can be enlarged or reduced proportionally when in use. However, no deformation or discoloration is allowed.
7.3 How to add
It is possible to use uniformly printed standard specification signs, mould pressing, nameplate printing, software application, etc.
7.4 Location of signs
The certification mark should be added near the nameplate of the product body.
Software products should be marked with certification marks on their software packaging/carriers, such as the software
If the product does not use packaging/carrier, it should be displayed in the "License Agreement"
The location is clear that the product has been certified by the certification body.
Tips & Frequently Asked Questions:Question 1: How long will the true-PDF of CNCA CCIS-2023_English be delivered?Answer: Upon your order, we will start to translate CNCA CCIS-2023_English as soon as possible, and keep you informed of the progress. The lead time is typically 1 ~ 3 working days. The lengthier the document the longer the lead time. Question 2: Can I share the purchased PDF of CNCA CCIS-2023_English with my colleagues?Answer: Yes. The purchased PDF of CNCA CCIS-2023_English will be deemed to be sold to your employer/organization who actually pays for it, including your colleagues and your employer's intranet. Question 3: Does the price include tax/VAT?Answer: Yes. Our tax invoice, downloaded/delivered in 9 seconds, includes all tax/VAT and complies with 100+ countries' tax regulations (tax exempted in 100+ countries) -- See Avoidance of Double Taxation Agreements (DTAs): List of DTAs signed between Singapore and 100+ countriesQuestion 4: Do you accept my currency other than USD?Answer: Yes. If you need your currency to be printed on the invoice, please write an email to [email protected]. In 2 working-hours, we will create a special link for you to pay in any currencies. Otherwise, follow the normal steps: Add to Cart -- Checkout -- Select your currency to pay. Question 5: Should I purchase the latest version CNCA CCIS-2023?Answer: Yes. Unless special scenarios such as technical constraints or academic study, you should always prioritize to purchase the latest version CNCA CCIS-2023 even if the enforcement date is in future. Complying with the latest version means that, by default, it also complies with all the earlier versions, technically.
|