China: National Cybersecurity Standardisation Technical Committee opened consultation on draft national standard for auditing information security management systems for cybersecurity technology

Description

National Cybersecurity Standardisation Technical Committee opened consultation on draft national standard for auditing information security management systems for cybersecurity technology

On 30 May 2025, the National Cybersecurity Standardisation Technical Committee (TC260) opened a public consultation on the draft national standard Guidelines for Auditing Information Security Management Systems for Cybersecurity Technology (GB/T 28450—XXXX/ISO/IEC 27007:2020). The consultation will be open until 29 July 2025. The draft, prepared by the designated standard drafting units, outlines auditing principles, methodologies, and auditor competencies for information security management systems (ISMS), referencing GB/T 19011—2021 and ISO/IEC 27007:2020. Stakeholders are invited to review the document and submit feedback to the TC260 Secretariat.

Original source

Scope

Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
cross-cutting, software provider: other software
Implementation Level
national
Government Branch
executive
Government Body
other regulatory body

Complete timeline of this policy change

Hide details
2025-05-30
in consultation

On 30 May 2025, the National Cybersecurity Standardisation Technical Committee (TC260) opened a pub…

2025-07-29
processing consultation

On 29 July 2025, the National Cybersecurity Standardisation Technical Committee (TC260) closes its …