DB11/T 171-2002 (English Version) PDF

Scope: This standard sets out the basis for security assessment of information systems of Beijing party and government agencies. This standard applies to information security testing and evaluation of the government affairs extranet of party and government agencies, the government affairs extranet and the government intranet, and the interconnection between the government affairs extranet and the Internet. This standard does not specify the detection and evaluation of government intranet system security. Other important information system security detection and assessment can be used as a reference. The implementation of this standard should be based on ensuring that each component of the party and government agency information system (such as operating system, database, server, router, firewall, application system, etc.) passes security testing and certification, and in accordance with the security requirements proposed in this specification , conduct system security testing and assessment of the information systems of party and government agencies.

DB11/T 171-2002 Referenced Document

GB 17859-1999 Classified oriteria for security protection of computer information system
ISO/IEC 17799:2000 Information technology - Code of practice for information security management

2002 DB11/T 171-2002 Evaluation Specification for Information System Security of the Government