China: National Cybersecurity Standardisation Technical Committee closes consultation on draft national standard on security configuration baselines for government cloud platforms

On 29 July 2025, the National Cybersecurity Standardisation Technical Committee (TC260) closes its public consultation on the draft national standard Cybersecurity Technology—Baseline Requirements for Security Configuration of Government Clouds. The draft sets out baseline security configuration requirements for government cloud platforms, covering components such as cloud management systems, virtual machines, containers, databases, host operating systems, and cloud security tools. The draft is structured into 8 sections, including general requirements, identity and access management, network security, data protection, and operational security.