NISSTC Seeks Comments on the Information Security Technology — Requirements for Classification and Grading of Network Data
On September 15, 2022, the National Information Security Standardization Technical Committee ("NISSTC") released the Information Security Technology — Requirements for Classification and Grading of Network Data (Draft for Comment) (the "Draft for Comment") for public comments by November 13, 2022.
The Draft for Comment sets out the principles and methods of data classification and grading, including the basic principles of data classification and grading, framework and methods of data classification, framework and methods of data grading, etc. This standard is applicable to situations where the competent (regulatory) department of an industry formulates the standard and specifications for data classification and grading in the industry or field, or where various localities and departments carry out data classification and grading activities, and is also used as a reference for data processors to conduct data classification and grading. The Draft for Comment states that, data is classified into three categories from high to low: core, important, and general, according to the importance of data in economic and social development, and the degree of harm to national security, public interest, or the legitimate rights and interests of individuals and organizations once it is leaked, tampered with, destroyed, or illegally obtained or used.
(Source: National Information Security Standardization Technical Committee)