ICS03.060 A11JR 中华人民共和国金融行业标准 JR/T0072—2020 代替JR/T0072—2012 金融行业网络安全等级保护测评指南 Testingandevaluationguidelinesforclassifiedprotectionofcybersecurityof financialindustry 2020-11-11发布 2020-11-11实施 中国人民银行 发布JR/T0072—2020 I目  次 前言.......................................................................................................................................................................II 引言.....................................................................................................................................................................III 1范围.....................................................................................................................................................................1 2规范性引用文件.................................................................................................................................................1 3术语和定义.........................................................................................................................................................1 4缩略语.................................................................................................................................................................5 5等级测评概述.....................................................................................................................................................5 5.1等级测评方法.............................................................................................................................................5 5.2单项测评和整体测评.................................................................................................................................5 6第二级测评要求.................................................................................................................................................6 6.1安全测评通用要求.....................................................................................................................................6 6.2云计算安全测评扩展要求.......................................................................................................................54 6.3移动互联安全测评扩展要求...................................................................................................................61 6.4物联网安全测评扩展要求.......................................................................................................................64 7第三级测评要求...............................................................................................................................................70 7.1安全测评通用要求...................................................................................................................................70 7.2云计算安全测评扩展要求.....................................................................................................................149 7.3移动互联安全测评扩展要求.................................................................................................................165 7.4物联网安全测评扩展要求.....................................................................................................................171 8第四级测评要求.............................................................................................................................................181 8.1安全测评通用要求.................................................................................................................................181 8.2云计算安全测评扩展要求.....................................................................................................................267 8.3移动互联安全测评扩展要求.................................................................................................................288 8.4物联网安全测评扩展要求.....................................................................................................................295 9整体测评.........................................................................................................................................................305 9.1概述.........................................................