China: National Cybersecurity Standardisation Technical Committee announced cybersecurity incident management standard: guidelines for incident response planning and preparation

On 24 February 2025, the National Cybersecurity Standardisation Technical Committee (TC260) announced the cybersecurity incident management standard: guidelines for incident response planning and preparation. The guidelines apply to organisations managing cybersecurity risks, including businesses and third-party incident management service providers. It outlines requirements for incident management policies, response planning, classification, reporting, collaboration, training, and continuous improvement. The guidelines also introduce revised vulnerability management processes and structural refinements.