Meaning
National standards in the People’s Republic of China define the technical requirements for information security and backup recovery for information systems. This gb t 20988 2007 classification provides a framework for categorizing the capability of a system to restore data after a failure or a disaster.
Capability Level
Six distinct levels of recovery capability are established by the standard to help organizations assess their resilience. At the lowest level, the gb t 20988 2007 requires only basic media backup without a designated backup site. Higher levels mandate redundant processing facilities, real time data replication, standby power systems and dedicated telecommunications links.
Each level is defined by the recovery point objective and the recovery time objective.
System Assessment
Critical infrastructure operators use this standard to align their disaster recovery plans with national security requirements. The gb t 20988 2007 dictates the technical measures needed to protect data integrity and availability across different industries. Compliance involves documenting the physical environment, the network architecture, the data flow and the backup management software.
Periodic drills are necessary to prove that the system can meet the recovery targets specified for its level.
Administrative Compliance
Government agencies and state owned enterprises must follow these guidelines when building information technology infrastructure. The gb t 20988 2007 acts as a benchmark during security audits conducted by the Ministry of Public Security or other regulatory bodies. Failure to meet the required level of recovery can result in an order to upgrade the facility or a penalty for non compliance.
It provides a common language for vendors and buyers of data center services. The standard remains a core component of the national information security level protection scheme.
