On 10 August 2020 the National Information Security Standardisation Technical Committee (NISSTC) released the Information Security Technology – Method of Boundary Identification for Critical Information Infrastructure (Draft for Comment) (draft method) for public opinion.(1)

The draft method provides that boundary identification for critical information infrastructure (CII) will include further analysis and sorting after the competent authority's identification of a critical business, during which the CII operator will identify the network facilities and information systems that are indispensable for the continuous and stable operation of the critical business's protection and emergency responses.

The draft method provides six factors that should be considered when identifying the boundaries of CIIs – namely:

  • critical business;
  • network facilities;
  • information systems;
  • critical business information;
  • critical business information flows; and
  • basic operation environments.

Critical business is the core element and basis for the boundary identification of CIIs and critical business information is an indispensable information resource for the normal operation of critical business and a bridge for network facilities and information systems to support the informatisation of critical businesses.

Network facilities and information system designs collect, integrate, process, present, apply, store and destroy critical business information according to the logic of business operations and functions in order to support the automated, intelligent and efficient operation of critical businesses.

Critical business information flow is the life cycle process of critical business information. By organising their critical business information flow, network facilities and information systems can better support the informatisation of critical businesses.

Basic operation environment refers to safety equipment, safety measures, rules and regulations, machinery, plant, water and electricity, all of which support critical businesses' basic operations.

For further information on this topic please contact Samuel Yang or Hongyu Jiang at AnJie Law Firm by telephone (+86 10 8567 5988) or email ([email protected] or [email protected]). The AnJie Law Firm website can be accessed at www.anjielaw.com.

Endnotes

(1) See here.