Shulou(Shulou.com)11/24 Report--

Thanks to CTOnews.com netizen CMCC for the clue delivery! According to news from CTOnews.com on April 3, the State Administration of Market Supervision, the Central Internet Information Office, the Ministry of Industry and Information Technology, and the Ministry of Public Security recently jointly issued the "opinions on the implementation of the Certification of Network Security Services," putting forward nine opinions on carrying out the certification of network security services uniformly implemented by the country.

CTOnews.com attached comments list:

First, the network security service certification work adheres to the basic principle of "unified management, joint implementation, unified standards, standardization and order". The General Administration of Market Supervision, the Central Internet Information Office, the Ministry of Industry and Information Technology, and the Ministry of Public Security shall, in accordance with their duties, strengthen the organization, implementation, supervision and management of certification work, and encourage network operators to widely accept the certification results of network security services. to promote the healthy and orderly development of the network security service industry.

2. The certification catalogue of network security services shall be determined and adjusted timely by the General Administration of Market Supervision, the Ministry of Industry and Information Technology, and the Ministry of Public Security in accordance with market demand and industrial development. At the present stage, it includes service categories such as inspection and evaluation, security operation and maintenance, security consultation and grade protection evaluation. Certification rules and certification marks shall be formulated and promulgated separately by the General Administration of Market Supervision after consulting the Central Internet Information Office, the Ministry of Industry and Information Technology and the Ministry of Public Security.

Third, the General Administration of Market Supervision, the Central Internet Information Office, the Ministry of Industry and Information Technology and the Ministry of Public Security jointly set up a network security service certification technical committee with the participation of government departments, scientific research institutions, certification institutions, standardization institutions, network security service organizations and users, to coordinate and solve the technical problems in the construction and implementation of the certification system, and to study and put forward suggestions for the compilation and revision of certification catalogues and certification rules.

4. Certification institutions engaged in network security service certification activities shall be established in accordance with the law, meet the basic conditions stipulated in the regulations on Certification and Accreditation and the measures for the Administration of Certification bodies, have the professional ability to engage in network security service certification activities, and shall be approved and qualified by the General Administration of Market Supervision after consulting the Central Network Information Office, the Ministry of Industry and Information Technology and the Ministry of Public Security in accordance with the responsibilities of various departments.

5. The network security service certification body shall, in accordance with the certification entrustment put forward by the certification consignor, carry out authentication work in accordance with the basic norms and rules of network security service certification, and establish a traceable working mechanism to fully record the whole certification process.

VI. The certification body for network security services shall disclose the standards of certification fees and the status of validity, suspension, cancellation or revocation of certification certificates, and submit the implementation of network security service certification and certification certificate information in accordance with the relevant provisions.

7. Network security service institutions that have passed certification shall carry out network security services in accordance with relevant laws and regulations, standards and norms, so as to ensure continuous compliance with certification requirements.

8. The market supervision department shall be responsible for supervising and managing the network security service certification bodies, certification activities and certification results, and shall investigate and deal with certification violations in accordance with the law.

IX. Internet information departments, industrial and information departments and public security departments shall, in accordance with their respective functions and duties, promote the acceptance and application of certification results, strengthen the supervision and management of network security services, promote the development of network security service industry, and investigate and deal with relevant illegal acts in accordance with the law.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.