JR/T 0072-2012 (English Version) PDF

Scope: This standard specifies the financial industry's requirements for information system security level protection evaluation and evaluation, including unit evaluation requirements and overall information system evaluation requirements for security evaluation of second-level information systems, third-level information systems and fourth-level information systems. wait. According to the grading of information systems in the financial industry, there is no five-level system, and the first-level system does not need to be filed with the public security agency and is not the focus of evaluation. This standard omits the specific content requirements for unit evaluation of first-level information systems and fifth-level information systems. This standard is applicable to the industry’s self-assessment (such as second-level information systems) and information security assessment service organizations (such as third- and fourth-level information systems) to conduct security assessments on the security level protection status of information systems.

JR/T 0072-2012 Referenced Document

GB/T 22239-2008 Information security technology.Baseline for classified protection of information system security
JR/T 0003-2001 Security Specification of the Interoperable Service of Bank Card
JR/T 0011-2004 Systematic specification of centralized bank data center
JR/T 0013-2004 The security specification for star topology inter-networking of financial industry
JR/T 0023-2004 The criterion of IT management for securities companies
JR/T 0026-2006 Specification for protection against lightning of banking computer information system
JR/T 0044-2008 Management specification of information system disaster recovery for banks
JR/T 0055.4-2009 Technical specifications on bankcard interoperability.Part 4:Data secure transmission control

2020 JR/T 0072-2020 Financial Industry Network Security Level Protection Evaluation Guide
2012 JR/T 0072-2012 Testing and evaluation guide for classified protection of information system of financial industry