General Administration of Quality Supervision, Inspection and Quarantine of the People‘s Republic of China
Latest
GB/T 31168-2023
Introduction
GB/T 31168-2023 Information Security Technology - Cloud Computing Service Security Capability Requirements is a national standard in China that sets out the necessary security requirements for cloud computing services. This standard aims to ensure the secure and reliable operation of cloud computing services, protect the confidentiality, integrity, and availability of data, and mitigate various security risks associated with cloud computing.
The standard covers a wide range of security capabilities, including access control, data protection, identity and authentication management, secure communication, security incident response, and risk assessment. It provides guidelines for cloud service providers to establish and maintain a robust security management system, implement effective security controls, and continually improve their security capabilities.
By complying with GB/T 31168-2023, cloud service providers can enhance their credibility and trustworthiness in the market, as well as meet the growing demands for secure cloud computing services. The standard also helps organizations and individuals to make informed decisions when selecting cloud service providers, ensuring their data and information are adequately protected.
Overall, GB/T 31168-2023 plays a vital role in promoting the development and adoption of secure cloud computing services in China. It provides a comprehensive framework for improving the security capabilities of cloud service providers and ultimately contributes to the overall security and reliability of cloud computing environments.
GB/T 31168-2023 history
2023GB/T 31168-2023 Information Security Technology Cloud Computing Service Security Capability Requirements
2014GB/T 31168-2014 Information security technology.Security capability requirements of cloud computing services