GB/T 22239-2019
Information security technology — Baseline for classified protection of cybersecurity (English Version)

Standard No.

GB/T 22239-2019

Language

Chinese, Available in English version

Release Date

2019

Published By

General Administration of Quality Supervision, Inspection and Quarantine of the People‘s Republic of China

Latest

GB/T 22239-2019

Replace

GB/T 22239-2008

---

Introduction

Background of Standard Revision and Core Changes

GB/T22239-2019, as the supporting standard of the Cybersecurity Law, has made structural adjustments to the 2008 version:

Comparison Dimensions	2008 Version	2019 Version
Standard Name	Information System Security Level Protection	Cybersecurity Level Protection
Classification System	Technical/Management Requirements	10 Major Security Areas + 5 Extended Requirements

---

Core Framework of Hierarchical Protection

Typical application scenarios

A provincial government cloud platform adopts the three-level standard of Cloud computing security extension requirements, with the focus on the implementation of:

• Virtual machine isolation detection
• Host machine security reinforcement

---

Key technology implementation points

Technical field	Secondary requirements	Third-level enhancements
Industrial control system	Basic access control	In-depth detection of industrial protocols

GB/T 22239-2019 Referenced Document

• GB 17859 Classified oriteria for security protection of computer information system
• GB/T 22240 Information security technology—Classification guide for classified protection of cybersecurity*， 2020-04-28 Update
• GB/T 31167-2014 Information security technology.Security guide of cloud computing services
• GB/T 31168-2014 Information security technology.Security capability requirements of cloud computing services
• GB/T 32919-2016 Information security technology—Application guide to industrial control system security control

GB/T 22239-2019 history

• 2019 GB/T 22239-2019 Information security technology — Baseline for classified protection of cybersecurity
• 2008 GB/T 22239-2008 Information security technology.Baseline for classified protection of information system security

Topics on standards and specifications

Standard and Specification