Path: Home > GB/T > Page206 > GB/T 44862-2024

Price & Delivery

US$629.00 · In stock · Download in 9 seconds
GB/T 44862-2024: Cybersecurity technology - Cyber-resilience evaluation criteria
Delivery: 9 seconds. True-PDF full-copy in English & invoice will be downloaded + auto-delivered via email. See step-by-step procedure
Status: Valid

Std ID	Version	USD	Buy	Deliver [PDF] in	Title (Description)
GB/T 44862-2024	English	629	Add to Cart	5 days [Need to translate]	Cybersecurity technology - Cyber-resilience evaluation criteria

GB/T 44862-2024: Cybersecurity technology - Cyber-resilience evaluation criteria

---This is an excerpt. Full copy of true-PDF in English version (including equations, symbols, images, flow-chart, tables, and figures etc.), auto-downloaded/delivered in 9 seconds, can be purchased online: https://www.ChineseStandard.net/PDF.aspx/GBT44862-2024
ICS 35.030 CCSL80 National Standard of the People's Republic of China Cybersecurity Technology Network Resilience Evaluation Criteria Released on October 26, 2024 Implementation on May 1, 2025 State Administration for Market Regulation The National Standardization Administration issued

Table of Contents

Preface III 1 Scope 1 2 Normative references 1 3 Terms and Definitions 1 4 Abbreviations 1 5 Overview 2 5.1 Network Resilience 2 5.2 Evaluation Index System 2 5.3 Standard Structure 3 6 Network Resilience Indicators 3 6.1 Prevention Capabilities 3 6.1.1 Situational Awareness 3 6.1.2 Inspection and Analysis 4 6.1.3 Collaborative Defense 4 6.1.4 Supply Chain Management 4 6.2 Ability to bear 5 6.2.1 Emergency Response 5 6.2.2 Limitation of Losses 5 6.2.3 Containment 5 6.2.4 Survivability 6.3 Resilience 6 6.3.1 Disaster Backup 6 6.3.2 Business Continuity 6 6.3.3 Data and Business Recovery 7 6.4 Adaptability 7 6.4.1 Self-management 7 6.4.2 Refactoring 8 6.4.3 Node Adaptability 8 6.4.4 Network Adaptability 8 7 Evaluation Methods 9 Appendix A (Normative) Network Resilience Evaluation Table 10 Appendix B (Informative) Examples of Network Resilience Indicators under Extreme Scenarios and Extreme Cybersecurity Incidents 15 Appendix C (Informative) Analysis of Network Resilience Requirements for Complex Information Systems 18 Appendix D (Informative) Network Resilience Architecture Design Methodology 20 Reference 26 Preface This document is in accordance with the provisions of GB/T 1.1-2020 "Guidelines for standardization work Part 1.Structure and drafting rules for standardization documents" Drafting. Please note that some of the contents of this document may involve patents. The issuing organization of this document does not assume the responsibility for identifying patents. This document is proposed and coordinated by the National Cybersecurity Standardization Technical Committee (SAC/TC260). This document was drafted by. Dalian University of Technology, China Software Evaluation Center (Software and Integrated Circuit Promotion Center of the Ministry of Industry and Information Technology), National Industrial Information Security Development Research Center, the Third Research Institute of the Ministry of Public Security, University of Science and Technology of China, Purple Mountain Laboratory, China Electronics Technology National Institute of Standardization, Lenovo (Beijing) Co., Ltd., Beijing Tianrongxin Network Security Technology Co., Ltd., China Academy of Information and Communications Technology, National Planning Commission Computer Network Emergency Response Technical Processing Coordination Center, China Certification and Inspection (Group) Co., Ltd., National Information Technology Security Research Center, China Electronics Xin Group Co., Ltd., CRRC Dalian Locomotive and Rolling Stock Co., Ltd., Tianyi Cloud Technology Co., Ltd., Guodian Nanjing Automation Co., Ltd., Energy Fusion Wisdom Technology Co., Ltd., the First Research Institute of the Ministry of Public Security, Huaneng Information Technology Co., Ltd., Wuhan Jinyinhu Laboratory, Huawei Technologies Co., Ltd. Co., Ltd., ZTE Corporation, Xinhuaxin Technology Co., Ltd., China National Tobacco Corporation Hubei Province Branch, Strategic Support Force Information Engineering University, Southeast University, Beijing Institute of Technology, Sangfor Technologies Co., Ltd., Shaanxi Information Engineering Research Institute, Changyang Tech Technology (Beijing) Co., Ltd., Shenzhen Open Source Internet Security Technology Co., Ltd., Songshan Laboratory, Anxin Network Shield (Beijing) Technology Co., Ltd. Co., Ltd., Zhengzhou Angshi Information Technology Co., Ltd., NetAnlian Information Technology Co., Ltd., and Guangdong Yunbai Technology Co., Ltd. The main drafters of this document are. Song Mingqiu, Zuo Xiaodong, Yang Chunli, Li Shuilin, Zhu Xuefeng, Zhang Jin, Chen Xingyue, Shangguan Xiaoli, Wang Huili, Wang Chonghua, Li Ruxin, Wang Shaojie, Yu Meng, Lu Chunjing, Cui Tao, Yu Liangwen, Wang Baoyan, Liu Yatian, Hu Bowen, Shen Jun, Guang Xiaoming, Wang Dawei, Zhu Lianghai, Xin Chen, Liu Wenbiao, Huang Shihai, Zhao He, Tang Chengjun, Zhao Shuo, Yu Guo, Wang Mufeng, Liang Li, An Hongjie, Cao Kunpeng, Pan Zhongying, Sun Weihong, Yang Sike, Song Jingmin, Ma Hailong, Cao Xianghui, Guo Zehua, Zhao Xiaorong, Jin Wei, Wang Yuhan, Xie Qin, Zhang Yajing, Wang Jie, Zhang Jianhui, Li Tianya, Li Ang, Yi Weilong, Jiang Wen, Ruan Yizong, Zhou Baikui. Cybersecurity Technology Network Resilience Evaluation Criteria 1 Scope This document specifies the network resilience evaluation criteria and provides a network resilience evaluation index system and evaluation methods. This document is applicable to the self-assessment of network resilience by organizations, the third-party assessment of network resilience by cybersecurity service agencies, and the Design, build, and enhance the network resilience of organizations. 2 Normative references The contents of the following documents constitute the essential clauses of this document through normative references in this document. For referenced documents without a date, only the version corresponding to that date applies to this document; for referenced documents without a date, the latest version (including all amendments) applies to This document. GB/T 20988 Information security technology Information system disaster recovery specification GB/T 25069-2022 Information Security Technical Terminology GB/T 30146-2023 Security and Resilience Business Continuity Management System Requirements GB/T 43269-2023 Information security technology - Criteria for the assessment of cybersecurity emergency response capabilities 3 Terms and Definitions The terms and definitions defined in GB/T 25069-2022 and the following apply to this document. 3.1 cyberresilience When the network faces adverse conditions, pressure, attacks or lost components, it should have the ability to prevent, withstand, recover and adapt to ensure Maintain the stability of system functions and structures, achieve orderly and effective responses to major network security incidents, and ensure the stable operation of key businesses. Note. The term "network" in this document refers to a network composed of computers or other information terminals and related equipment that receives and sends information according to certain rules and procedures. A system for collecting, storing, transmitting, exchanging and processing information. 3.2 critical business Once a cybersecurity incident occurs, it may seriously affect the network security and stability of an organization or customer, causing significant business losses. 3.3 Survivability The ability of the system to continue to run basic business functions and complete key business operations in the event of an attack, failure, malfunction or interruption. Note. Failure means that a system or component loses its purpose or function as designed, and although it can operate, it cannot output the correct results. A state in which a system or device cannot perform its specified functions. Basic business functions refer to the basic functional units that constitute business functions, such as processes, threads, or algorithms. Modules, etc. [Source. ISO /IEC /IEEE 24765-2017, 3.4060, with modifications] 4 Abbreviations The following abbreviations apply to this document. ...