After several rounds of evaluation, on June 22, Huawei Cloud High Level Protection Service System passed the 4-level evaluation of network security level protection by the Ministry of Public Security with high scores. This indicates that Huawei Cloud has taken the lead in meeting the compliance requirements of Equal Protection 2.0 and providing users with more secure and reliable cloud services.
What is waiting for insurance?
Classified protection of network security is the basis for the Ministry of Public Security to guide domestic organizations to carry out network security construction. The network security hierarchical protection system is the basic system, basic national policy and basic method of national information security assurance work, and is the fundamental guarantee for promoting the healthy development of informatization and safeguarding national security, social order and public interests. At present, it has become a general security standard widely followed by all industries, which is divided into 1-5 levels, the highest level of 5, and the highest level of 4 that cloud service providers can obtain at present.
What does it mean for Huawei Cloud to obtain Level 4 equal protection?
This evaluation covers the key regions and nodes of Huawei Cloud. The system security scheme is designed and built according to the requirements of Level 4 equal protection standard. Combined with Huawei's excellent practices, a multi-level in depth protection system is realized. Huawei Cloud, as a national key information infrastructure, passed the "equal protection" 4 evaluation this time, focusing on meeting the requirements for high performance, high reliability, high security and high adaptability of resources for the migration of key applications from finance, government and large enterprises to the cloud.
Huawei Cloud's efforts in compliance certification have never stopped
Compliance is like correct driving requirements and specifications. Only when these requirements and specifications are met, can we be safe on the road. The certification is equivalent to the driver's license issued by the authority to the cloud manufacturer. It can be seen that compliance certification is the basis for ensuring the security of cloud platforms and an important way to improve the security of cloud platforms. Huawei Cloud has always attached importance to and made efforts to build the security compliance of the cloud platform, including three aspects:
Meet the general security standards of the industry, such as the CSA STAR gold certification of cloud security held by Huawei Cloud, ISO27001, network security level protection, etc.
Meet the security requirements of the business area, such as the Trusted Cloud and IT Grundschutz certifications Huawei Cloud has obtained in Germany.
Industry/service enhancement certification
That is, for specific industries, stronger security certification is required to meet the security requirements of customers in these industries, such as PCI-DSS certification, which can improve the security of financial and payment businesses; Ministry of Industry and Information Technology trusted cloud certification to improve service security.
In addition, Huawei Cloud has also passed BSIMM, ITSS service enhancement certification, IDC/ISP license, TUV trusted cloud certification, and participated in the pilot of authoritative standards for cloud service network security.
In addition to compliance certification, Huawei Cloud has also built a full stack security system to provide users with visual and easy-to-use security services, such as:
Database security services with three functions: database firewall, database audit and data desensitization; The first key management service in China that enables users to control cloud keys; The attack response time is up to 3 seconds, and the DDoS advanced anti attack service can protect 1T traffic attacks.
Huawei Cloud takes its own equal protection practice
Open it and share it with users
In order to enable enterprises on the cloud to effectively and professionally pass the level assurance, Huawei Cloud will combine years of security practice and compliance experience, especially in level assurance, with qualified level assurance evaluation institutions such as the National Network and Information System Security Product Quality Supervision and Inspection Center (the Third Research Institute of the Ministry of Public Security) to launch professional evaluation services, Tailor made suggestions for customers to ensure compliance, to guide customers to select and deploy security services, to rectify the network, host, database, security management system, etc., so that users can save worry and effort.
