This standard specifies the organization-related basic security capabilities and data lifecycle-related data service security capabilities that big data service providers shall have.
This standard is applicable to the construction of big data service security capabilities by government departments, enterprises and institutions, as well as the review and evaluation on big data service security capabilities of big data service providers by third-party organizations.
2 Normative references
The following referenced documents are indispensable for the application of this document. For dated references, only the edition cited applies. For undated references, the latest edition of the referenced document (including any amendments) applies.
GB/T 22239-2008 Information security technology - Baseline for classified protection of information system security
GB/T 25069-2010 Information security technology - Glossary
GB/T 31168-2014 Information security technology - Security capability requirements of cloud computing services
GB/T 35273-2017 Information security technology - Personal information security specification
GB/T 35295-2017 Information technology - Big data - Terminology
3 Terms and definitions
For the purposes of this document, the terms and definitions given in GB/T 25069-2010 and GB/T 35295-2017 as well as the following apply.
3.1
big data
the data set that is featured by huge quantity, diverse types, fast flow speed, changeable characteristics, etc., and is difficult to be effectively organized, stored, computed, analyzed and managed by using the traditional data architecture and data processing technology
3.2
data lifecycle
an evolution process of data including various survival forms from data generation, through acquisition, transmission, storage, processing (including computing, analysis, visualization, etc.), interchange, and to destruction, etc.
3.3
data service
a kind of network information service providing evolution of data survival forms such as data acquisition, transmission, storage, processing (including computing, analysis, visualization, etc.), interchange and destruction
3.4
big data service
various data lifecycle-related data services and system services supporting organizations or individuals to collect, store, use and discover the value of big data
Note: Big data service generally faces structured, semi-structured and unstructured data services that are massive, heterogeneous and rapidly changing, and is provided through scalable big data platform at the bottom layer and multiple big data applications at the upper layer
GB/T 35274-2017 The following standards are cited：
