Revision and Application of TheStandard for Cloud Computing Service Security Capability Requirements
Focusing on the construction of government cloud platform,this paper introduce the policy and system of government cloud security assessment,as well as the basis and standards for government cloud security assessment.By comparing the content of GB/T 31168-2023"Information security technology-Cloud computing service security capability requirements"before and after revision,it analyzes the additional requirements in terms of security capability level and strength.Based on case studies,it proposes standard application suggestions from personnel control,supply chain security,cloud platform self security,and security management center,providing reference for the continuous improvement of security capabilities of government cloud platforms.
government cloudsecurity assessmentcapabilitysupply chaincloud platform