China: National Cybersecurity Standardisation Technical Committee closes consultation on cybersecurity incident management standard: principles and processes

Description

National Cybersecurity Standardisation Technical Committee closes consultation on cybersecurity incident management standard: principles and processes

On 19 May 2025, the National Cybersecurity Standardisation Technical Committee (TC260) closes its consultation on the draft on cybersecurity incident management standard: principles and processes. This standard, which replaces GB/T 20985.1-2017, provides guidelines for managing cybersecurity incidents, including planning, response, and post-incident review. Updates include expanded terminology, enhanced documentation requirements, and alignment with international standards such as ISO/IEC 27035-1:2023.

Original source

Scope

Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
other service provider
Implementation Level
national
Government Branch
executive
Government Body
other regulatory body

Complete timeline of this policy change

Hide details
2025-03-20
in consultation

On 20 March 2025, the National Cybersecurity Standardisation Technical Committee (TC260) initiated …

2025-05-19
processing consultation

On 19 May 2025, the National Cybersecurity Standardisation Technical Committee (TC260) closes its c…