国家网络安全等级保护测评体系标准应用实践  

Application of Assessment and Evaluation Standard Architecture for National Cybersecurity Classified Protection

作　　者：罗峥[1] 袁静[1] 马力 陈广勇[1] 刘静 江雷 

机构地区：[1]公安部第三研究所 [2]中关村信息安全测评联盟

出　　处：《信息技术与标准化》2022年第5期45-49,共5页Information Technology & Standardization

摘　　要：以网络安全测评机构能力评估标准为核心,由测评过程类标准、安全要求类标准和分析方法类标准等共同构建的等级保护测评体系标准,通过相互衔接与配合,深入应用于等级测评专业化测评队伍能力建设、技术监督、专业平台工具研发等各个环节。在应用实践中,做到了与国家相关法律法规及政策配套协调,为市场准入和质量监管提供重要依据和参考,在网络安全测评行业管理、网络安全产业推进中发挥了重要作用。National Cybersecurity Classified Protection(NCCP)assessment and evaluation standard architecture,which takes capability criteria standard of evaluation institutions as core,is composed of evaluation process standards,security requirements standards and analysis method standards.With mutual coordination and alignment,standards in the architecture are deeply integrated into NCCP practices such as capability building of evaluation institutions,technical supervision,professional platform tool development,etc.Coordinating with relevant national laws,regulations and policies,the architecture provides important basis and reference for market admission and quality supervision,and plays an important role in the management of the cybersecurity assessment and evaluation industry and the promotion of the cybersecurity industry.

关 键 词：网络安全 等级保护 国家标准 测评体系 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] D922.16[自动化与计算机技术—计算机科学与技术]