网络安全标识
Search documents
国家网信办:《网络安全标识管理办法》公开征求意见
Yang Shi Xin Wen· 2025-11-21 10:03
Core Points - The National Internet Information Office and the Ministry of Industry and Information Technology have drafted the "Network Security Label Management Measures" and the "Product Catalog for Implementing Network Security Labels" to enhance product cybersecurity capabilities and protect consumer rights [1][2] - The network security label reflects the cybersecurity capability level of products with internet connectivity, categorized into three levels: Basic, Enhanced, and Leading, represented by one star, two stars, and three stars respectively [1][2] Summary by Sections Network Security Label Definition - The network security label indicates the cybersecurity capability level of products, applicable to products with internet connectivity [1] - The levels of cybersecurity capability range from Basic to Leading, with specific requirements for each level [1] Requirements for Each Level - Basic Level: Must meet national standards, including no weak or default passwords, a vulnerability management mechanism, and regular software updates [1] - Enhanced Level: Must achieve advanced domestic cybersecurity capabilities [1] - Leading Level: Must meet international advanced standards and pass penetration testing to withstand high-level cyber attacks [1] Implementation and Compliance - Product manufacturers must conduct cybersecurity capability testing and obtain a report to determine the security level [2] - The National Internet Information Office and the Ministry of Industry and Information Technology will supervise the registration and usage of network security labels [2] - Violations, such as forgery or false advertising of network security labels, will result in penalties, including the revocation of product registration [2]