网络安全标识
Search documents
网络安全标识管理办法公开征求意见
Xin Hua She· 2025-11-21 12:18
Core Viewpoint - The National Internet Information Office and the Ministry of Industry and Information Technology have drafted a cybersecurity labeling management method to enhance product cybersecurity capabilities and protect consumer rights, with public feedback open until December 6, 2025 [1] Group 1: Cybersecurity Labeling - Cybersecurity labeling reflects the cybersecurity capability level of products, with participation from producers being voluntary [1] - The labeling system categorizes cybersecurity capabilities into three levels: Basic, Enhanced, and Leading, represented by one star, two stars, and three stars respectively [1] - Basic level requires compliance with national safety standards, including no weak or default passwords, a vulnerability management mechanism, and regular software updates [1] Group 2: Advanced Requirements - Enhanced level requires products to meet advanced domestic cybersecurity standards [1] - Leading level requires products to meet international advanced standards and pass penetration testing to withstand high-level cyber attacks [1] - Producers must conduct cybersecurity capability testing and obtain a report to determine the labeling level, and any forgery or false advertising related to the labels is prohibited [2]