On August 2, 2021, the National Information Security Standardization Technical Committee (TC260) released the Information Security Technology-Security Framework for Blockchain Technology (hereinafter referred to as "the Standard") draft and collected opinions from the public.
This standard is a recommended national standard. In its development process, the TC260 studied several international and national standards, such as ISO/IEC 10118-3:2018, ISO/IEC 11770-1:2010, GB/T 31168-2014, and GB/T 37092. These standards laid the foundation for both the research and development of the Standard.
The Security Framework establishes the security structure of blockchain technology, conducts research on all levels of the framework, and develops appropriate security requirements and management norms. It provides construction guidance and basis for blockchain security, accounting operation, group consensus and privacy protection based on cryptography technology. The Standard also specifies the definition and corresponding responsibilities of relevant stakeholders involved in blockchain activities (users, service providers, auditors and regulators, etc.).
The Standard strictly abides by relevant laws and regulations including the Cryptography Law of the People's Republic of China, Cybersecurity Law of the People's Republic of China, and Blockchain Information Service Management Regulation. It also refers to several international advanced standards, such as ISO 22739:2020, as well as the standard in development like ISO/DIS 23257. The call-for-comment period of the Standard ends on September 30, 2021.
This standard will fill in the blanks for China in the field of blockchain technology security standards. BESTAO recommends that relevant enterprises study its content, as well as other published and in-development standards referenced by the Standard. If you would like to report an opinion on the framework, please send it to TC260 per its published feedback channels. BESTAO will also follow up this standard closely.
If you need more information or need any help on the topic, please contact:
assistant@bestao-consulting.com