How to ensure transparency in supply chains

List of the contents of this article:

• 1, System classification of general system
• 2, Check the information system of the evaluation level at least several times a year
• 3、How is the security level of computer system divided?

System Classification of General System

Windows series operating system, Mac operating system, Unix-like system, embedded system, GoogleChromeOS Among them, Unix-like systems include SystemV, BSD and Linux. Windows operating system: Windows operating system is the most common computer operating system and is the operating software developed by Microsoft.

Divided into large categories: 1 physical system. A system composed of multiple physical bodies, such as motor speed regulation system, automatic machine tool processing system, automatic drilling system, etc.2 System of affairs.

The classification of the system can be based on two types of criteria: 1 the type of component; 2 a certain type of relationship between the components. These two types of classification criteria are independent of each other and can be combined.

At present, there are so many kinds of operating systems that it is difficult to classify them uniformly with a single standard.

The information system of the evaluation level should be checked at least several times a year

1. The third-level information system of level protection shall be evaluated at least once a year. The fourth-level information system should be evaluated at least once every six months. The fifth-level information system should be graded and evaluated according to special security requirements.

2. The third-level information system requires an evaluation to be carried out at least once a year.China implements a network security level protection system. The level protection object is divided into five levels, which are gradually raised from level one to five. The requirements of each level are different. The higher the level, the stricter the requirements.

3, do it once every 2 years. The full name of etc. assurance evaluation is information security level protection evaluation, which is a qualified evaluation institution certified by the Ministry of Public Security. According to the national information security level protection standards, and entrusted by relevant units, the security level protection status of the information system shall be detected and evaluated in accordance with relevant management norms and technical standards.

4. The fourth-level information system requires at least one evaluation every six months; the third-level information system requires at least one evaluation every year; the second-level information system generally carries out an evaluation every two years, and there is no mandatory time requirement. Some industries have industry standard requirements, such as the power industry that the second-level system two Do an evaluation once a year.

5. The third-level system is now evaluated once a year. Specific introduction: Level protection filing refers to the declaration and filing of organizations or units to relevant departments in accordance with the requirements of the information security level protection system to ensure the security and compliance of their information systems.

How is the security level of computer system divided?

1. At the first level, after the information system is destroyed, it will cause damage to the legitimate rights and interests of citizens, legal persons and other organizations, but it will not harm national security, social order and public interests.

2. Protection. For example, the security level can be divided into decryption, confidentiality and top secret level. Level B2 This level is called Structured Protection. B2-level security requires all objects in the computer system to be labeled and assigned security levels to devices (such as workstations, terminals and disk drives).

3. Computer system security protection is divided into the following five levels, namely user autonomous protection level, system audit protection level, security mark protection level, structured protection level and access verification protection level.