GB/T 38561-2020
Information security technology—Technical requirements for cybersecurity management support system (English Version)

Standard No.

GB/T 38561-2020

Language

Chinese, Available in English version

Release Date

2020

Published By

General Administration of Quality Supervision, Inspection and Quarantine of the People‘s Republic of China  CN  /  GB

Latest

GB/T 38561-2020

Introduction

Analysis of the core content of the standard

Functional modules	Core requirements	Implementation points
Security target management	Classification management + dynamic maintenance	Need to establish a target life cycle management mechanism
Event monitoring	Comply with GB/Z20986 classification	Need to integrate automated collection and analysis engines
Data exchange	Cross-system communication guarantee	Need to support encryption protocols such as HTTPS/FTP

---

Detailed explanation of key technical requirements

6.4 Information security incident monitoring

The system needs to implement:
1) Automated event capture based on SNMP collector
2) Standardized interface for manual reporting of events
3) Closed-loop management process for incident handling

7.3 Authority management

Adopt a three-power separation model:
- System administrator: account lifecycle management
- Security administrator: authority allocation and policy configuration
- Security auditor: log auditing and behavior analysis

---

Implementation suggestions

Case study of a government cloud platform

By deploying a security management support system that complies with this standard:
1) 1) Asset discovery efficiency improved by 300%
2) Incident response time shortened to 15 minutes
3) Passed the Level 3 certification of Information Security Protection 2.0

Standard Evolution Analysis

Main enhancements compared to the 2015 draft:
- Added a Vulnerability Analysis section (8.6)
- Detailed data security requirements (7.4)
- Strengthened multi-level system data exchange specifications (6.11)

GB/T 38561-2020 Referenced Document

• GB/Z 20986-2007 Information security technology.Guidelines for the category and classification of information security incidents

GB/T 38561-2020 history

• 2020 GB/T 38561-2020 Information security technology—Technical requirements for cybersecurity management support system

Topics on standards and specifications

Standard and Specification