On 1 February 2026, the National Information Security Standardisation Technical Committee (TC260) Guideline for Information Security Risk Management in Cybersecurity Technologies (GB/T 31722-2025) enters into force. The standard replaces GB/T 31722-2015 in its entirety. It applies to organisations that establish and implement their own Information Security Management Systems and outlines methodologies aligned with current international practices for information security risk management.
Original source