Path:
Home >
GB/T >
Page216 > GB/T 43046-2023
Price & Delivery
US$799.00 · In stock · Download in 9 secondsGB/T 43046-2023: Information technology service - Information technology emergency risk management in public security emergency response
Delivery: 9 seconds. True-PDF full-copy in English & invoice will be downloaded + auto-delivered via email. See
step-by-step procedureStatus: Valid
| Std ID | Version | USD | Buy | Deliver [PDF] in | Title (Description) |
| GB/T 43046-2023 | English | 799 |
Add to Cart
|
6 days [Need to translate]
|
Information technology service - Information technology emergency risk management in public security emergency response
|
Click to Preview a similar PDF
Basic data
| Standard ID | GB/T 43046-2023 (GB/T43046-2023) |
| Description (Translated English) | Information technology service - Information technology emergency risk management in public security emergency response |
| Sector / Industry | National Standard (Recommended) |
| Classification of Chinese Standard | L77 |
| Classification of International Standard | 35.080 |
| Word Count Estimation | 42,464 |
| Date of Issue | 2023-09-07 |
| Date of Implementation | 2024-04-01 |
| Issuing agency(ies) | State Administration for Market Regulation, China National Standardization Administration |
GB/T 43046-2023: Information technology service - Information technology emergency risk management in public security emergency response
---This is a DRAFT version for illustration, not a final translation. Full copy of true-PDF in English version (including equations, symbols, images, flow-chart, tables, and figures etc.) will be manually/carefully translated upon your order.
ICS 35.080
CCSL77
National Standards of People's Republic of China
Information technology services in response to public security emergencies
Information technology emergency risk management
Published on 2023-09-07
2024-04-01 Implementation
State Administration for Market Regulation
Released by the National Standardization Administration Committee
Table of contents
Preface III
Introduction IV
1 Scope 1
2 Normative reference documents 1
3 Terms and Definitions 1
4 Abbreviations 2
5 General 2
5.1 The relationship between IT emergency risk management and IT emergency management 2
5.2 Risk Management Principles 2
5.3 Risk management culture 3
5.4 Risk Management Strategy 3
5.5 Risk management techniques 3
5.6 Risk management objects 4
6 Risk Management Framework 4
7 Top-level design 5
7.1 Strategic Planning 5
7.2 Organizational Building 6
7.3 Architecture design 6
8 Risk Management Environment 6
8.1 Internal and external environment 6
8.2 Enabling factors 7
9 Risk Management System 7
10 Risk Management Elements 7
10.1 Professional team and personnel7
10.2 Risk type 8
10.3 Risk Management Process 8
10.4 Information Systems 8
10.5 Data 9
10.6 Others 9
11 Risk Management Implementation 9
11.1 Coordination and planning 9
11.2 Building and running 9
11.3 Monitoring and evaluation10
11.4 Improvements and optimizations10
Appendix A (Informative) Overall Risk of IT Emergency Management 11
Appendix B (informative) IT emergency management special risks 14
Appendix C (informative) IT emergency risk management organizational structure and management system 22
Appendix D (Informative) Overall application scenario in the event of a public security emergency 25
Appendix E (informative) Specific application scenarios in the event of public security emergencies 31
Reference 34
Foreword
This document complies with the provisions of GB/T 1.1-2020 "Standardization Work Guidelines Part 1.Structure and Drafting Rules of Standardization Documents"
Drafting.
Please note that some content in this document may be subject to patents. The publisher of this document assumes no responsibility for identifying patents.
This document is proposed and coordinated by the National Information Technology Standardization Technical Committee (SAC/TC28).
This document was drafted by. Shanghai Guhang Information Technology Development Co., Ltd., China Electronics Technology Standardization Institute, Shanghai Computer Software
Technology Development Center, Beijing National Accounting Institute, Shanghai Municipal Health Commission, Shanghai Network and Information Security Emergency Management Center,
Beijing Taiji Huabao Technology Co., Ltd., Beijing Tongchuang Yongyi Technology Development Co., Ltd., Beijing Saidi Certification Center Co., Ltd., Wanda
Information Co., Ltd., Digital China Ronxin Cloud Technology Services Co., Ltd., National Industrial Information Security Development Research Center, Suzhou Software
Pan Gang, Zhu Ke, Sun Cheng, Wang Shouxuan, Yang Dehua, Lu Xuezhe, Zhao Qiuduo, Pan Zheng, Wang Chengming, Yu Liping, Lu Qianqian, Chen Changjie, Men Meiling,
Sun Minglei, Wang Meng, Li Guangya, Ant, Hou Pengfei, Liu Min, Ding Haiyuan, An Shudi, Jin Kaili, Lu Quanli, Fu Huamao, Zhao Xiaorong, Chen Zhendong,
He Yuxiang, Li Qing, Dong Ganghua, Fu Yu, Que Zhixing, Cheng Yongxin, Hu Lianglin, Mao Huili, Huang Haifeng, Chai Lei, Mi Dengke, Xu Ping, Zuo Youliang,
Zhao Danfeng, Jin Yanfang, Tang Zecheng, Gao Jin, Wang Chengkun, Cao Chuanyi, Zhong Minghui, Zhu Wuzhen, Huang Zefeng, Chen Han, Zhu Rongrong, Zhao Liang, Wang Meng,
Cai Weifeng, Bai Ruiying, Meng Fanzhe, Cao Jiaheng, Wang Huiying, Yao Minsen, Du Le, Yan Hangfei, Gao Zhanliang, Li Kai.
Introduction
In order to effectively control the IT emergency risks faced by organizations in the event of public security emergencies, improve the corresponding IT emergency risk management capabilities
To promote IT’s safe, reliable and effective support for organizational business, and propose IT emergency risk management rules for responding to public security emergencies
standards to achieve the goals of responsibility implementation, risk control and value realization.
The implementing entity can clearly organize the response to public security emergencies in accordance with the requirements of IT emergency risk management specifications for responding to public security emergencies.
The top-level design and management system of IT emergency risk management for the entire incident, combined with the implementation environment, standardize the corresponding IT emergency risk management implementation process
process, clarifying the goals and basic tasks of overall planning and planning, construction and operation, supervision and evaluation, improvement and optimization.
Information technology services in response to public security emergencies
Information technology emergency risk management
1 Scope
This document establishes the general principles and framework for IT emergency risk management in the event of public security emergencies, and stipulates relevant top-level equipment.
planning, environment, system, elements and implementation requirements.
This document applies to.
a) The decision-making level or top management implements relevant top-level design functions for IT emergency risk management;
b) Establish or improve the organization’s relevant IT emergency risk management system;
c) Clarify the requirements of the organization’s relevant IT emergency risk management processes;
d) Standardize the implementation of organizational-related IT emergency risk management;
e) Third parties or other institutions carry out relevant IT emergency risk management consulting services.
2 Normative reference documents
This document has no normative references.
3 Terms and definitions
The following terms and definitions apply to this document.
3.1
organization
A person or a group of people whose functions are composed of responsibilities, authorities and relationships to achieve a goal.
Note. The concept of organization includes, but is not limited to, agents, companies, groups, firms, enterprises, administrative agencies, joint ventures, associations, charities or research
Institutions, or parts or combinations of the above-mentioned organizations, whether incorporated or not, public or private.
[Source. GB/T 19000-2016,3.2.1]
3.2
decision-making level decision-making level
The highest authority responsible for determining the goals, programs and implementation plans of the organization (3.1) and conducting macro-control.
3.3
top management top management
A person or group of persons who directs and controls an organization (3.1) at the highest levels.
Note. Top managers have the authority to authorize and provide resources within the organization.
[Source. GB/T 19000-2016,3.1.1]
3.4
It occurs suddenly, causing or may cause heavy casualties, property losses, damage to the ecological environment and serious social harm, endangering public safety.
complete emergency.
...