GB/Z 29830.1-2013

Information technology—Security technology—A framework for IT security assurance—Part 1: Overview and framework

GB/Z 29830.1-2013 信息技术安全技术信息技术安全保障框架第1部分：综述和框架

National Standards · Guidance Published English PDF available

Issue date: 2013-11-12
Effective date: 2014-02-01
Standard type: National Standards
ICS / CCS: 35.040 / L80
Issuing authority: General Administration of Quality Supervision, Inspection and Quarantine of the People's Republic of China and the Standardization Administration of China

Need another edition? Match the full code and year to your project before ordering. Search editions

Scope

The intention of this part of GB/Z 29830 is to introduce assurance methods for deliverables, their relationships and their classification in accordance with a general life cycle model, in a manner that enables confidence in the security functionality of a deliverable to be obtained incrementally. The approach adopted throughout this part is to outline, through a framework for identifying various assurance approaches and assurance stages, some of the basic concepts and terminology needed to understand and apply the assurance methods involved. Parts 2 and 3 of this guidance technical document use the classification of assurance methods in this part to guide readers in selecting appropriate assurance methods and possible combinations for a given deliverable. This part provides guidance on the classification of assurance methods, including some assurance methods that are not specific to the information security domain. Where necessary, the standard may be used in fields other than IT security. This part applies only to deliverables (see 4.3) and the information security issues of their related organizations.

Source notes

English introduction is available from the synchronized standard record.

Document contents

A verified table of contents is not published for this record. Request the contents for the exact edition before deciding whether it covers your needs.

Request table of contents