T/ISC 0019-2022 移动互联网应用程序（App）数据安全测 评服务机构能力评定准则

ICS35.240.01

L70

团体标准

T/ISC0019—2022

移动互联网应用程序（App）数据安全测

评服务机构能力评定准则

CapabilitydeterminationcriteriaformobileInternetapplicationsdata

securityassessmentserviceorganization

2022-11-01发布2023-02-01实施

中国互联网协会发布

T/ISC0019—2022

目  次

1范围.................................................................................1

2规范性引用文件.......................................................................1

3术语、定义和缩略语...................................................................1

3.1术语和定义.......................................................................1

3.2缩略语...........................................................................1

4能力评定原则.........................................................................2

5能力评定评审机构.....................................................................2

6能力评定要求.........................................................................2

6.1基本条件.........................................................................2

6.2规模与资产要求...................................................................2

6.2.1C级............................................................................2

6.2.2B级............................................................................3

6.2.3A级............................................................................3

6.3人员构成和素质要求...............................................................3

6.3.1C级............................................................................3

6.3.2B级............................................................................3

6.3.3A级............................................................................3

6.4经验业绩要求.....................................................................3

6.4.1C级............................................................................3

6.4.2B级............................................................................4

6.4.3A级............................................................................4

6.5组织与管理要求...................................................................4

6.5.1C级............................................................................4

6.5.2B级............................................................................4

6.5.3A级............................................................................4

6.6质量保证要求.....................................................................4

6.6.1C级............................................................................4

6.6.2B级............................................................................4

6.6.3A级............................................................................4

6.7项目管理要求.....................................................................5

6.7.1C级............................................................................5

6.7.2B级............................................................................5

6.7.3A级............................................................................5

6.8技术能力要求.....................................................................5

6.8.1C级............................................................................5

6.8.2B级............................................................................5

6.8.3A级............................................................................5

6.9专业培训要求.....................................................................6

6.9.1C级............................................................................6

I

T/ISC0019—2022

6.9.2B级............................................................................6

6.9.3A级............................................................................6

6.10禁止性要求......................................................................6

7能力评定申请.........................................................................6

7.1能力评定等级申请.................................................................6

7.2申请材料提交.....................................................................7

7.3预审与意见反馈...................................................................7

8能力评定评审.........................................................................7

8.1评审原则.........................................................................7

8.2培训.............................................................................7

8.3考评.............................................................................7

8.4评审合格标准.....................................................................8

8.5结果公示.........................................................................8

9能力评定监督管理.....................................................................8

9.1能力评定监督的频次和方式.........................................................8

9.2能力评定监督的结论...............................................................8

9.3《能力评定书》管理...............................................................8

9.3.1《能力评定书》有效期...........................................................8

9.3.2《能力评定书》续期申请