信息系统安全保护等级定级指南

目 次

1 2

范围 ........................................................................................................................................................11 术语和定义 ............................................................................................................................................11 2.1 2.2 2.3 2.4 2.5 3

业务信息（Business Information） ..........................................................................................11 业务信息安全性（Security of Business Information） ............................................................11 业务服务保证性（Assurance of Business Service） ...............................................................11 信息系统（Information System） .............................................................................................11 业务子系统（Business Subsystem） ........................................................................................11

定级对象 ................................................................................................................................................11 3.1 3.2

信息系统的划分 ....................................................................................................................... 12 信息系统和业务子系统 ........................................................................................................... 12

4 决定信息系统安全保护等级的要素 ................................................................................................... 12 4.1 4.2

决定信息系统重要性的要素 ................................................................................................... 13 定级要素赋值 ........................................................................................................................... 13

5 6

确定信息系统安全保护等级的步骤 ................................................................................................... 15 信息系统安全保护等级的确定方法 ................................................................................................... 16 6.1 6.2 6.3

确定业务信息安全性等级 ....................................................................................................... 16 确定业务服务保证性等级 ....................................................................................................... 16 确定信息系统安全保护等级 ................................................................................................... 18

7 8

信息系统安全保护等级的调整 ........................................................................................................... 18 附录 ....................................................................................................................................................... 20 8.1 8.2

实例1 ........................................................................................................................................ 20 实例2 ........................................................................................................................................ 21

— 10 —