China: National Cybersecurity Standardisation Technical Committee closes consultation on cybersecurity incident management standard: guidelines for incident response planning and preparation

On 19 May 2025, the National Cybersecurity Standardisation Technical Committee (TC260) closes a public consultation on cybersecurity incident management standard: Guidelines for incident response planning and preparation. The guidelines apply to organisations managing cybersecurity risks, including businesses and third-party incident management service providers. It outlines requirements for incident management policies, response planning, classification, reporting, collaboration, training, and continuous improvement. The guidelines also introduce revised vulnerability management processes and structural refinements.