GB/T 20261-2006 (English Version) Information technology. Systems security engineering. Capability maturity model

Standard No.: GB/T 20261-2006
Language: Chinese, Available in English version
Release Date: 2006
Published By: General Administration of Quality Supervision, Inspection and Quarantine of the People‘s Republic of China
Status: Be replaced 2021-06
Replace By: GB/T 20261-2020
Latest: GB/T 20261-2020

Scope: The System Security Engineering Capability Maturity Model (hereinafter referred to as SSE-CMM) is a process reference model. It focuses on the security requirements of a system or several related systems in the field of information technology security (ITS). Within the field of ITS, the SSE-CMM focuses on the processes used to achieve ITS, especially the maturity of these processes. The purpose of the SSE-CMM is not to prescribe specific processes, let alone specific methods, used by organizations. Rather, it is expected that organizations preparing to use the SSE-CMM will leverage their existing processes -- those that are based on any other IT security guidance document. The scope of this standard includes: System security engineering activities involving the entire life cycle of secure products or trusted systems: concept definition, requirements analysis, design, development, integration, installation, operation, maintenance and final decommissioning; System developers and integrators, and the requirements of organizations providing computer security services and computer security engineering; applicable to security engineering organizations of all types and sizes, from business to government and academia.

GB/T 20261-2006 Referenced Document

GB/T 11457 Information technology.Software engineering terminology
GB/T 18336.1 Information technology.Security techniques.Evaluation criteria for IT security.Part 1:Introduction and general model*， 2015-05-15 Update
GB/T 20000.1 Guidelines for standardization.Part 1:Standardization and related actives.General vocabulary*， 2014-12-31 Update
GB/T 8566 Systems and software engineering—Software life cycle processes*， 2022-10-14 Update
GB/T 9387.2-1995 Information processing systems--Open Systems Interconnection--Basic Reference Model--Part 2: Security architecture

2020 GB/T 20261-2020 Information security technology—System security engineering—capability maturity model
2006 GB/T 20261-2006 Information technology. Systems security engineering. Capability maturity model