ICS 33.040.50 CCS M32 YD 中华人民共和国 通信行业标准 YD/T XXXX—XXXX 物联网基础安全 基于公用电信网的宽带客 户智能网关安全分级分类管理技术要求 IoT Basic Security — Technical requirements for security grading and classification management of broadband customer intelligent gateway based on public telecommunication network 报批稿 XXXX - XX - XX发布 XXXX - XX - XX实施 中华人民共和国工业和信息化部   发 布 YD/T XXXX—XXXX I目 次 前言 .................................................................................. IV 1 范围 ................................................................................. 1 2 规范性引用文件 ....................................................................... 1 3 术语和定义 ........................................................................... 1 4 缩略语 ............................................................................... 1 5 分级分类原则 ......................................................................... 2 6 第一级安全要求 ....................................................................... 3 6.1 硬件 ............................................................................. 3 6.2 系统 ............................................................................. 3 6.3 网络 ............................................................................. 3 6.4 应用 ............................................................................. 3 6.5 数据 ............................................................................. 3 6.6 安全需求分析 ..................................................................... 4 6.7 设计 ............................................................................. 4 6.8 开发 ............................................................................. 4 6.9 测试 ............................................................................. 4 6.10 交付 ............................................................................ 4 6.11 漏洞和安全事件处置 .............................................................. 4 6.12 产品生命周期管理 ................................................................ 4 6.13 组织及人员 ...................................................................... 4 6.14 配置和变更 ...................................................................... 4 7 第二级安全要求 ....................................................................... 4 7.1 硬件 ............................................................................. 4 7.2 系统 ............................................................................. 5 7.3 网络 ............................................................................. 5 7.4 应用 ............................................................................. 5 7.5 数据 ............................................................................. 5 7.6 安全需求分析 ..................................................................... 6 7.7 设计 ............................................................................. 6 7.8 开发 ............................................................................. 6 7.9 测试 ............................................................................. 6 7.10 交付 ............................................................................ 6 7.11 漏洞和安全事件处置 .............................................................. 6 7.12 产品生命周期管理 ................................................................ 7 7.13 组织及人员 ...................................................................... 7 7.14 配置和变更 ...................................................................... 7 8 第三级安全要求 ....................................................................... 7 YD/T XXXX—XXXX II8.1 硬件 ............................................................................. 7 8.2 系统 ............................................................................. 7 8.3 网络 ............................................................................. 7 8.4 应用 ............................................................................. 8 8.5 数