{"id":42454,"date":"2021-08-18T07:58:12","date_gmt":"2021-08-18T07:58:12","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/china-orders-annual-security-reviews-for-all-critical-information-infrastructure-operators\/"},"modified":"2021-08-18T07:58:12","modified_gmt":"2021-08-18T07:58:12","slug":"china-orders-annual-security-reviews-for-all-critical-information-infrastructure-operators","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/china-orders-annual-security-reviews-for-all-critical-information-infrastructure-operators\/","title":{"rendered":"China orders annual security reviews for all critical information infrastructure operators"},"content":{"rendered":"

China’s government has introduced rules for protection of critical information infrastructure.<\/p>\n

An announcement<\/a> by the Cyberspace Administration of China (CAC) said that cyber attacks are currently frequent in the Middle Kingdom, and the security challenges facing critical information infrastructure are severe. The announcement therefore defines infosec regulations and and responsibilities.<\/p>\n

The CAC referred to critical infrastructure as “the nerve center of economic and social operations and the top priority of network security”. China’s definition of critical information infrastructure can be found in Article 2 of the State Council’s “Regulations on the Security Protection of Critical Information Infrastructure<\/a>” and boils down to any system that could suffer significant damage from a cyber attack, and\/or have such an attack damage society at large or even national security.<\/p>\n