GB/T 20984-2007

Abolished

Information security technology - Risk assessment specification for information security

信息安全技术 信息安全风险评估规范

Standard Type
GBT
ICS
35.040
CCS
L80
Status
Abolished
Issue Date
2007-06-14
Implementation
2007-11-01
Centralized Committee
国家标准委
Issuing Authority
中华人民共和国国家质量监督检验检疫总局、中国国家标准化管理委员会

Application Summary AI generated

This standard provides a framework and methodology for conducting risk assessments of information systems, covering asset identification, threat analysis, vulnerability evaluation, and risk calculation. It is applied by organizations in China across all industries—including government, finance, and telecommunications—to systematically evaluate and manage information security risks, ensuring compliance with national security regulations and improving cybersecurity posture.

Related Standards

Transparency note: The application summary and key sentences on this page were automatically generated by AI from the standard's original text. This content has not been human-verified and should not be used for compliance or regulatory purposes. Always refer to the official standard document from the issuing authority.