Information security service qualification is the qualification of information security service institutions to provide safety services, including legal status, resource status, management level, technical ability and other requirements. Information security service's qualification certification is based on national laws and regulations, national standards, industry standards and technical specifications, as well as basic certification norms and certification rules, and evaluates the qualifications of information security service provided by information security service institutions.
Second, what is CCRC information security service qualification?
Information security service qualification is the general name of service qualification certification popular in the market. At present, the license issuing agency with the largest number of licenses, the widest application and the highest recognition in the industry is China Network Security Review Technology and Certification Center (English abbreviation: China; Formerly known as China Information Security Certification Center (ISCCC), this organization is a bureau-level organization responsible for conducting network security review and certification according to the National Cyber Security Law and national laws and regulations on compulsory product certification and network security management, and its business is guided by the Central Network Information Office. Information security service qualification certificate issued by this institution, commonly known as CCRC information security service qualification in the industry, is divided into Grade I, Grade II and Grade III * * *, with Grade I being the highest and Grade III the lowest. The validity period of the certificate is three years (the old certificate is one year), and a supervision audit is required within 12- 18 months from the date of obtaining the certificate.