Service Introduction

Equal Protection AssessmentIt is a professional service that detects, verifies and evaluates the security protection capabilities of information systems in accordance with the national cybersecurity classification protection system. The aim is to confirm whether the information system meets the corresponding security protection level requirements, ensure the safe and stable operation of the system, and reduce cybersecurity risks. Third-party cybersecurity classification protection institutions conduct assessment work in accordance with relevant national standards for cybersecurity classification protection, comprehensively inspect technical measures and security management systems, and provide objective basis for system filing, rectification, operation and supervision and inspection.

Our third-party software evaluation agency, in collaboration with the cybersecurity level protection agency, conducts the evaluation work in accordance with the "Information Security Technology - Basic Requirements for Cybersecurity Level Protection" and relevant level protection standards. And in combination with the national standard for software Product quality evaluation GB/T 25000.51-2016 "Systems and Software Engineering - Systems and Software Quality Requirements and Evaluation (SQuaRE) - Part 51: Quality Requirements and Test Details for Ready and Usable Software Products (RUSP)", for the systemSecure physical environment, secure communication network, secure regional boundary, secure computing environment, security management center, security management systemConduct detection and evaluation on such contents. When necessary, combine vulnerability scanning, security configuration verification, identity authentication, access control and other technical verifications to ultimately form standardized onesEqual Protection AssessmentReports and rectification suggestions provide a basis for the system to continuously meet the requirements of the level protection.

Equal Protection AssessmentApplicable to the following application scenarios:

Filing for classification protection

System evaluation at level three or above

Regulatory inspection

The system is online and in operation.

Safety rectification verification

Continuous compliance construction

It aims to help relevant units enhance their cybersecurity protection capabilities, meet national cybersecurity regulatory requirements, and reduce security risks.

Test range

Test basis and cycle

Test basis

In accordance with GB/T 25000.51-2016 "Systems and Software Engineering - Systems and Software Quality Requirements and Evaluation (SQuaRE) - Part 51: Quality requirements and test details for ready-to-use software products (RUSP)", requirements specification, contracts, design documents, etc.

Test cycle

It takes 5 to 15 working days. Special requests can be expedited.

Testing process

  1. 01

    Demand communication

    Confirm the system scope, acceptance objectives and report purposes.

  2. 02

    Data review

    Sort out contracts, requirements, configuration items and deployment materials.

  3. 03

    Formulate a plan

    Form an assessment plan, use cases and execution arrangements.

  4. 04

    Carry out the test

    Conduct a tripartite evaluation and verification of the configuration items in accordance with the standards.

  5. 05

    Deliver the report

    Issue test reports and support acceptance and archiving.

Output results

Testing Report

Software Test Report

CNAS CMA
Purpose of the report Acceptance, auditing, bidding and tendering
Report content Test conclusions, basis, and records
Service recipients Government agencies, universities, enterprises and public institutions
Delivery method Electronic scanned copy, paper version
Cover example of CMA/CNAS software test report

Authority

Form a reviewable third-party testing conclusion based on the CNAS national accredited laboratory qualification, testing basis and execution records.

Traceable

Retain records of test cases, software defects, retests and inspection results, and adapt to the archiving of information-based acceptance materials.

It can be placed on the ground

The software test report expression is oriented towards review, expert acceptance and project management units, reducing the cost of secondary interpretation.

Service advantages

CMA/CNAS national recognized testing capabilities

Establish standardized processes around software evaluation, informatization acceptance, and the delivery of third-party software test reports. The reports should be clearly expressed, facilitating review and archiving.

1000+ Cumulative issuance of reports
30+ Covering industry fields
99% Report acceptance pass rate
10"Year +" Experience in testing services

CMA/CNAS qualification

The report is stamped with the CMA metrological certification and CNAS accreditation marks, which have legal effect and directly meet the requirements for project acceptance and auditing.

Independent third party

The testing institution has no interest connection with the developer or the client. The testing process operates independently and the conclusions are true and reliable.

Fair and objective

Strictly in accordance with national standards and contractual agreements, the test conclusions are not subject to interference by the client and can stand up to review and re-examination.

Serve the whole country

Support remote and on-site detection of software projects across the country, standardize service processes, and ensure consistent report quality.

Relevant successful cases

Security testing of the information system for the provincial platform project of performance Evaluation of public hospitals in Gansu Province

Security testing of the information system for the provincial platform project of performance Evaluation of public hospitals in Gansu Province

The provincial platform project V2.8.5 for public hospital performance assessment conducted information system security testing. The testing work was carried out from two aspects: security function acceptance and web application vulnerability scanning. Through strict execution of the tests, including the initial test and regression test, a software evaluation report was issued.
The functional and information system security acceptance test of the "Ecological Cloud" Comprehensive Service Platform project of Shaanxi Provincial Forestry Investigation and Planning Institute

The functional and information system security acceptance test of the "Ecological Cloud" Comprehensive Service Platform project of Shaanxi Provincial Forestry Investigation and Planning Institute

The "Ecological Cloud" comprehensive service platform construction project in Shaanxi Province carried out testing work from two aspects: functionality and information system security. Through strict execution of tests, including initial tests and regression tests, a software acceptance test report was issued.

Solution entry

Software Test Report for the Final Acceptance of Scientific and Technological Research projects

The conclusion and acceptance of scientific and technological research projects require software testing reports. The conclusion and acceptance report should formulate testing plans and strategies in accordance with the requirements of project conclusion and acceptance. Only in this way can the conclusion and acceptance of scientific research projects be meaningful. The content of the software testing report covers the main technical indicators such as functions, performance, and security. A high-quality testing report can not only help the project to be concluded smoothly It can also lay a foundation for the subsequent transformation of achievements.

Software Project Acceptance Test Report - CNAS Software Inspection

The acceptance testing of software research projects covers multi-dimensional assessment requirements such as functionality, performance, and security. The acceptance process of software research projects follows the GB/T 25000.51-2016 standard. The cover of the software test report is stamped with the CNAS logo, and the test report is guaranteed by national authoritative qualifications, which helps the project to be accepted smoothly and improves the quality of the software.

Software acceptance testing for Internet of Things (iot) intelligent devices

By providing software acceptance testing solutions for Internet of Things (iot) smart devices, the software quality and network security of iot products are guaranteed. The key elements of software acceptance testing: functional testing, performance testing, security and privacy testing, compatibility testing, and user experience testing. These elements jointly ensure the overall quality of Internet of Things products.