Basic requirements for level protection

• 1. Basic security requirements are security requirements for the basic security protection capabilities that information systems of different security protection levels should have. According to different implementation methods, basic security requirements are divided into two categories: basic technical requirements and basic management requirements.
• 2. Basic technical requirements are put forward from the aspects of physical security, network security, host security, application security and data security; basic management requirements are from security management system, security management organization, personnel security management, system construction management and system operation It is pointed out in several aspects of maintenance management that basic technical requirements and basic management requirements are two inseparable parts to ensure the security of information systems.

Classification protection implementation process

• The whole level protection implementation process includes: system rating, security planning and design, security implementation/realization, security operation management and system termination.
• System rating: Information system operation and use units determine the information system security level in accordance with the "Guidelines for the Grading of Information Security Levels of Information System Information".
• Security planning and design: According to the grading situation and security requirements of the information system, design a reasonable overall design scheme that meets the requirements of grading protection.
• Security implementation/realization: In accordance with the overall requirements of the information system overall plan, combined with the information system security construction plan, implement security measures in stages.
• Safe operation: In the safe operation stage, activities such as operation management, change management and control, safety status monitoring, safety incident handling and emergency plan, safety assessment and continuous improvement, and supervision and inspection are carried out.
• System Termination: Ensure that sensitive information within the system is properly handled when the information system is transferred, terminated or abandoned.

Service Scope and Content

• "Quicker" provides corresponding security services for each stage in the implementation of graded protection. In the system grading stage, it can help identify the security protection level of the information system and confirm the security level of the information system. The security master planning phase provides specific security planning recommendations. The safety design and implementation stage can assist customers to test the implementation and effectiveness of safety measures. In the stage of safe operation and maintenance, services such as grade compliance inspection, safety rectification design, emergency plans and drills are provided. Finally, the customer information system can meet the basic requirements of national level protection.