Framework
Full specification

CSL (China)

Oh no! No description found. But not to worry. Read from Tasks below how to advance this topic.

The Cybersecurity Law of the People's Republic of China is a law designed to ensure cybersecurity, data protection, and data localization. It defines security obligations for network operators and service providers and establishes rules for data management and cross-border data transfer .

The Cybersecurity Law of the People's Republic of China was enacted on November 7, 2016 and implemented on June 1, 2017. The law aims to enhance cybersecurity, data protection and data localization in the interest of national security. It establishes the principle of cyberspace sovereignty and defines the security obligations of internet product and service providers, as well as internet service providers.

It includes rules for personal information protection, a security system for critical information infrastructure. It also requires network operators to store select data within China and allows Chinese authorities to conduct spot-checks on a company's network operations.

No items found.
Tasks
40
Scope
Here's what
CSL (China)
requires and how to comply.

Below you'll find all of the requirements of this framework. In Cyberday, we map all requirement to global tasks, making multi-compliance management easy. Do it once, and see the progress across all frameworks!

Requirements
Article 23: Critical network and specialized cybersecurity product security certification
Article 21: Ensuring the network is free from interference, damage or unauthorized access
Article 36: Confidentiality agreements when purchasing network products and services
Article 34.1: Establish independent security management institutions
Article 34.3: Disaster recovery backups
Article 34.2: Conduct cybersecurity education and training
Article 37: Storage of personal information
Article 34.5: Fulfilling other legal obligations
Article 33: Continuous operation of critical information infrastructure
Article 34.4: Formulating and testing contingency plans
Article 38: Cybersecurity risk and detection reporting obligations
Article 25: Contingency plans for cybersecurity incidents
Article 29: Cybersecurity cooperation among network operators
Article 22.2: Obligations for ongoing security maintenance
Article 27: Individual and organizational obligations in cases of activities endangering cybersecurity
Article 28: Technical support and assistance to public security organs
CSL (China)
learning hub

Explore our comprehensive resources and improve your security with the themes of this framework.

How Cyberday helps with
CSL (China)

Discover specific ways our platform streamlines your ISO 27001 compliance process, from automated controls to audit preparation.

Explore use case
Free
CSL (China)
assessment

Take our comprehensive assessment to identify gaps in your current implementation and get personalized recommendations.

Start assessment
Read more about
CSL (China)

Dive deeper with our articles, case studies, and expert insights on framework implementation.

Read article
Guide to compliance

Get a concise overview of all requirements, controls, and implementation steps in our quick guide.

Get the guide
Framework comparison

See how the overlap and differences with any other framework to optimize your compliance strategy.

Compare framework
Join a live
CSL (China)
webinar

Participate in expert-led sessions covering implementation strategies, common pitfalls, and best practices for compliance.

Register for webinar
Join our live webinars

Participate in expert-led sessions covering implementation strategies, common pitfalls, and best practices for compliance.

Register for webinar
What are frameworks?

Understand the basics of cyber security frameworks with our comprehensive guide.

Read the article

The ISMS component hierachy

When building an ISMS, it's important to understand the different levels of information hierarchy. Here's how Cyberday is structured.

Framework

Sets the overall compliance standard or regulation your organization needs to follow.

Requirements

Break down the framework into specific obligations that must be met.

Tasks

Concrete actions and activities your team carries out to satisfy each requirement.

Policies

Documented rules and practices that are created and maintained as a result of completing tasks.

Never duplicate effort. Do it once - improve compliance across frameworks.

Reach multi-framework compliance in the simplest possible way
Security frameworks tend to share the same core requirements - like risk management, backup, malware, personnel awareness or access management.
Cyberday maps all frameworks’ requirements into shared tasks - one single plan that improves all frameworks’ compliance.
Do it once - we automatically apply it to all current and future frameworks.