GB/T 20274.3-2008
ActiveInformation security technology Evaluation framework for information systems security assurance Part 3: Management assurance
信息安全技术 信息系统安全保障评估框架 第3部分：管理保障
Application Summary AI generated
This standard specifies the management assurance requirements and evaluation criteria for information system security, focusing on organizational security management, personnel management, and operational management controls. It is applied in the security evaluation and certification of information systems, particularly for government, financial, and enterprise IT environments requiring formal security assurance assessments. The standard provides a framework for evaluating the effectiveness of management processes that support the overall security posture of an information system.
Related Standards
GB/T 21049-2007
Chinese-sensible code
GB/T 19245-2003
Specification for information interchange of electronic business card
GB/T 16986-2003
Application identifiers for EAN·UCC system
GB/T 16829-2003
Information technology--Automatic identification and data capture techniques--Bar code symbology specifications--Interleaved 2 of 5
GB/T 18391.2-2003
Information technology--Specification and standardization of data elements--Part 2: Classification for data elements
GB/T 19253-2003
Information technology--Notation of format for data element values
GB/T 2261.1-2003
Classification and codesof basic personal information--Part 1: Codes for sexual distinction of human
GB/T 2261.2-2003
Classification and codesof basic personal information--Part 2: Codes for marriage status
Transparency note: The application summary and key sentences on this page were automatically generated by AI from the standard's original text. This content has not been human-verified and should not be used for compliance or regulatory purposes. Always refer to the official standard document from the issuing authority.