Combing the qualification of information security service

There are two types of information security service qualifications.

One is issued by the China Information Security Evaluation Center (ITSEC), which is divided into three subcategories, with five levels (level 1: basic implementation level; level 2: plan tracking level; level 3: fully defined level; level 4: quantitative control level; level 5: continuous improvement level), of which level 5 is the highest and 3 major subcategories are:

Information security engineering

Information security disaster recovery class

Security development class

One is issued by China Information Security Certification Center (ISCCC), which is divided into six major subcategories and three levels, of which the first class is the highest, and the six major subcategories are:

Emergency treatment service qualification certification

Risk assessment service qualification certification

Security integration service qualification certification

Disaster backup and recovery service qualification certification

Software security development service qualification certification

Security operation and maintenance service qualification certification