The General Office of the Ministry of Housing and Urban-rural Development ("MOHURD") has recently issued the Technical Standards for Internet Cyber Security Facilities (Draft for Comment) (the "Draft for Comment") for public comments by November 18, 2018.
Major contents of the Draft for Comment are organized into seven chapters: "General Provisions", "Glossary and Abbreviations", "Planning of Cyber Security Programs", "Design of Cyber Security Programs", "Construction Requirements for Cyber Security Programs", "Acceptance Inspections of Cyber Security Programs" and "Operation and Maintenance of Cyber Security Facilities". In the Chapter "Planning of Cyber Security Programs", the Draft for Comment provides that cyber security facilities should be able to safeguard the stable and continual operation of the internet business, effectively fend off, monitor and audit cyber security risks, and support emergency responses to unexpected security events and business backup for disaster recovery purposes, and these cyber security facilities should be planned, built and used simultaneously with internet information facilities. With regard to the "design of cyber security programs", the Draft for Comment stipulates that, cyber security facilities should be able to satisfy certain security needs, such as the availability, integrity, confidentiality and auditability of internet business.