? Full name: qualification of classified computer information system integration
The qualification of classified system integration refers to the qualification of engaging in activities involving state secrets and the ability to keep state secrets required by units engaged in classified system business. The "integration of classified system" here includes the planning, design, development, implementation, service and guarantee of classified system engineering.
According to the Measures for the Administration of Computer Information System Integration Qualification Involving State Secrets issued by the State Secrecy Bureau, the administrative examination and approval system is implemented for the qualification of classified system integration. An entity applying for the qualification business of classified system integration (hereinafter referred to as the applicant) shall be audited by the relevant state secrecy department and issue a qualification certificate. The qualification of classified system integration is comprehensively evaluated according to its capital composition, personnel composition, technical level, service level and safety facilities.
1, basic conditions
The integration unit of classified system shall be an enterprise or institution with independent legal personality in People's Republic of China (PRC). And meet the following conditions:
1. Abide by national secrecy laws and regulations and have a sound secrecy system.
2, with the Ministry of information industry issued the "computer information system integration qualification certificate" (level 1 or level 2), and a successful example of network security integration.
Enterprises and institutions without computer information system integration qualification certificate (Grade I or II) should specialize in information security technology research and development, have independently developed security technology or products recognized by relevant state departments, independently carry out network security integration business for more than two years (including two years), and independently complete more than three successful examples.
Enterprises and institutions that only engage in network wiring, consulting, R&D and security product sales, but not in computer information system integration business, will not accept applications for qualification of classified system integration.
3, with computer hardware, software and network engineering professional high, intermediate technical titles of professional team and organization and management personnel system integration ability, the total number of employees shall not be less than 30 people, of which the unit formally signed a labor contract or employment contract for more than one year of professional and technical personnel shall not be less than 20 people.
4. Have advanced information system design and development equipment and a good security environment.
5. The registered capital is not less than 654.38+0 million, and it has good business performance and asset status.
6. Accept the guidance, supervision and inspection of the secrecy department [1].
2. Edit the application conditions
Classification system integration qualification is divided into three categories: Grade A, Grade B and individual qualification. The company shall apply to the State Secrecy Bureau for Grade A qualification. Qualified units can engage in the integration of classified systems nationwide. Before the application, it must be evaluated by a qualification evaluation agency designated by the State Secrecy Bureau.
An entity applying for the qualification of classified information system integration shall meet the following basic conditions:
(1) is incorporated in People's Republic of China (PRC) (except Hong Kong, Macao and Taiwan);
(two) China citizens, China legal persons or state-invested enterprises and institutions;
(3) Having obtained the legal person qualification for more than 3 years (inclusive) and having no illegal record;
(4) The staff are limited to China people and China citizens in China;
(5) Having security measures and hardware environment that meet the requirements of the State Secrecy Bureau.
In addition to meeting the above basic conditions, the application for Grade A qualification also needs to meet the following conditions:
1, comprehensive conditions:
(1) has a clear history and has been engaged in information system integration business for more than 3 years;
(2) The main business is information system integration, security and confidentiality integration and related businesses, and the main business income is the main source of unit income;
(3) The property right relationship is clear, the capital structure meets the requirements, and the registered capital reaches a certain scale;
(4) the economic operation is in good condition, and the financial data has passed the audit of the audit unit recognized by the state;
(5) Employees and superior units are reliable, and there is no violation of discipline in the past three years.
2. Performance:
(1) A certain amount of information system integration projects above 1 have been completed in recent 3 years, and the project quality is qualified, which has passed the acceptance and put into use;
(2) At least 1 safety system integration projects have been completed every year in the past three years. The completed projects have high technical content, the adopted safety technologies and products meet the requirements, and the configuration is reasonable and effective;
(3) Typical projects in major business areas are at the leading level in the same industry in China in terms of technical level and engineering quality;
(four) the main business achievements completed in the past three years have reached a certain amount;
(5) None of the information system integration projects or security system integration projects undertaken in the past three years failed to pass the acceptance test, and there was no major system failure for which the contractor was responsible;
(6) The personnel of this unit and the superior unit agree and support the confidentiality management, and are willing to undertake corresponding confidentiality responsibilities.
3. Management ability:
(1) has perfect internal management system and safety measures;
(2) Having a perfect technical management system and implementation mechanism;
(3) It has a perfect technical service system, is equipped with specialized institutions and personnel, and can provide necessary technical services;
(4) It has a training mechanism and plan that systematically integrates technical knowledge, confidential technical knowledge and confidential rules and regulations, and can effectively organize implementation and assessment;
(5) Having a reasonable human resource management system and personnel confidentiality control system, which can be effectively implemented.
4, technical ability:
(1) The main person in charge should have more than 4 years of management experience in the field of information technology, the main technical person in charge should have a senior title in information technology and be engaged in system integration technology for at least 3 years, and there should be no less than 5 managers who can be engaged in the management of classified computer information system integration projects;
(2) There are not less than 30 professional and technical personnel who can undertake the security and confidentiality integration of information systems, and the proportion of bachelor degree or above is not less than 90%;
(3) The technical strength of computer information system integration and the technical level of security system integration rank among the top in China;
(4) There are senior R&D personnel specializing in the development of system integration technology and corresponding research sites and equipment, and a perfect system for system development and testing has been established [2].
3 qualification management editor
1. The construction unit of classified system and the unit undertaking the integration of classified system shall sign a confidentiality agreement to stipulate the confidentiality obligations that the integration unit shall perform.
2. If the integration unit of classified system needs to cooperate with other units in the process of undertaking system integration, its cooperation unit shall have the qualification certificate.
3. After the completion of the classified system, the integration unit shall hand over all the data of the classified system to the construction unit of the classified system, and shall not keep it privately or dispose of it without authorization.
4. If the name, business scope, enterprise nature and affiliation of the integration unit that has obtained the qualification certificate change, it shall go through the examination and approval procedures again in accordance with the provisions of Articles 7 and 8 of these Measures.
5, provinces, autonomous regions, municipalities directly under the central government, cities under separate state planning, sub-provincial city security bureau of the administrative region of the classified system integration unit to implement safety supervision and management.
6, classified system integration unit in violation of the provisions of these measures, by the provinces, autonomous regions, municipalities directly under the central government, cities under separate state planning, sub-provincial city secrecy bureau ordered it to make corrections within a time limit or rectification still does not meet the requirements, by the State Secrecy Bureau to recover its "qualification certificate".