首页|云计算服务安全能力要求标准修订变化及应用

云计算服务安全能力要求标准修订变化及应用

扫码查看
围绕政务云平台建设,介绍政务云安全评估政策以及政务云安全评估的依据标准,通过GB/T 31168-2023《信息安全技术 云计算服务安全能力要求》标准修订前后内容的对比,分析其在安全能力级别和强度方面所增加的要求,并结合案例从人员管控、供应链安全、云平台自身安全、安全管理中心等方面提出标准应用建议,为政务云平台持续提升安全能力提供参考.
Revision and Application of TheStandard for Cloud Computing Service Security Capability Requirements
Focusing on the construction of government cloud platform,this paper introduce the policy and system of government cloud security assessment,as well as the basis and standards for government cloud security assessment.By comparing the content of GB/T 31168-2023"Information security technology-Cloud computing service security capability requirements"before and after revision,it analyzes the additional requirements in terms of security capability level and strength.Based on case studies,it proposes standard application suggestions from personnel control,supply chain security,cloud platform self security,and security management center,providing reference for the continuous improvement of security capabilities of government cloud platforms.

government cloudsecurity assessmentcapabilitysupply chaincloud platform

赵剑

展开 >

深圳市信息安全管理中心

政务云 安全评估 能力 供应链 云平台

2024

信息技术与标准化
中国电子技术标准化研究所

信息技术与标准化

影响因子:0.219
ISSN:1671-539X
年,卷(期):2024.(12)