Level protection is a basic system in the field of information security. Enterprises included in the scope of level protection supervision need to consider the importance of information systems in national security, economic construction, and social life. If the information system is destroyed, it will have a negative impact on national security and social order. grading and filing work based on factors such as the degree of harm to the legitimate rights and interests of citizens, legal persons and other organizations, public interests and the legitimate rights and interests of citizens, legal persons and other organizations.

Alibaba Cloud's Class A guarantee evaluation service is a professional coaching service provided to Class A guarantee companies. Its goal is to strengthen and improve the enterprise's management and technical security capabilities through gap report interpretation, security consulting, security rectification and other services, and reduce security risks. The gap between the current situation and the requirements for grade protection is provided to assist enterprises in successfully completing the grade protection assessment and filing work.

Class guarantee assessment services are provided by security service providers that Alibaba Cloud cooperates with, and Alibaba Cloud provides service guidance and service quality supervision.

Evaluation stage Service Content Standard service Exclusive service Whether to support service method Whether to support service method Rating Preparation and writing of filing materials Provide technical support for the preparation of filing materials, including Q&A, suggestions, compliance review, etc. Remotely On demand (onsite or remote) Rating support Provide technical support for grading and filing, including how to grade the system, the grading level of the system, whether grading can be merged, etc. - On demand (onsite or remote) Rating expert review Carry out grading expert review work. - On demand (onsite or remote) Filing Waiting for security filing Submit the filing materials to the network security and complete the filing work. - on site Registration certificate tracking Follow up the progress of network security filing and approval work, and be responsible for the output of filing certificates. - Remotely Evaluation Preliminary evaluation and gap analysis of equal protection Services included in Level 3 of Class B: Evaluate compliance with safety technologies required in Level 3 standards. Perform vulnerability scans on the system. Perform penetration testing of the system. Evaluate the compliance of safety management measures required by the third-level standards (comprehensiveness of system construction, compliance with daily safety work execution). Services included in the second level of equal protection: Evaluate compliance with safety technologies required in Level 3 standards. Perform vulnerability scans on the system. Evaluate the compliance of safety management measures required by the third-level standards (comprehensiveness of system construction, compliance with daily safety work execution). on site on site Technical support for the assessment process Cooperate to complete the assessment work, prepare the evidence required for the assessment, provide assessment questions and answers, and ensure the smooth development of the assessment. - on site Rectify Security technology rectification and reinforcement Output a list of problems and risks for pre-assessment and provide rectification suggestions for problems and risks. Remotely On demand (onsite or remote) Provide problem and risk rectification plans, and assist in providing rectification support, technical Q&A, etc. to improve the efficiency and effectiveness of rectification. - On demand (onsite or remote) Safety management rectification and optimization Output a list of problems and risks for pre-assessment and provide rectification suggestions for problems and risks. Remotely On demand (onsite or remote) Provide management system templates and plans required for safety management rectification, and assist in optimizing the preparation and output of system documents. - On demand (onsite or remote) Report Second review, rectification and confirmation Review and confirm the rectified problems and risk points, and provide input for the output of the evaluation report. Remotely On demand (onsite or remote) Report output Preparation, sealing, output, and network security filing of the MLPS evaluation report. Remotely Remotely project management Undertake the PM of the MPS work and be responsible for project planning and arrangement, resource coordination, progress tracking, and problem handling. Remotely On demand (onsite or remote) Provide quality control, project reporting and other services to improve project efficiency and quality. - On demand (onsite or remote)

Alibaba Cloud Security Manager service relies on the technical advantages of Alibaba Cloud platform and Alibaba Cloud's years of security best practice experience to provide cloud users with a full range of security technology and consulting services, from the boundary to the intranet, from vulnerabilities to policies, and from configuration to Provide data security operation services, establish and continuously optimize cloud security defense systems for cloud users, ensure cloud business security, and allow cloud users to focus on their own business development.

Cloud Security Center Cloud Firewall Web Application Firewall DDoS Protection and other security protection data cover multi-level protection such as VPN network, ECS, Web application, database protection, etc. Based on the data mining technology accumulated in many years of actual combat, it provides every cloud user with practical attack and defense capabilities. intelligence. At the same time, the security operation team relies on attack and defense intelligence data, combined with the protection requirements of different users and the current status of business systems, to adjust security protection strategies from time to time to reduce security risks to a controllable range and achieve dynamic adjustment, dynamic defense, dynamic operation, and dynamic management.

Faced with the huge number of users of security products and services, Security Butler uses a large-scale and systematic operation model to better and more efficiently serve every cloud user.

The emergency response system of cloud security monitoring and security housekeeper can quickly help cloud users correctly respond to hacker intrusions, clean up Trojan backdoors, analyze the causes of intrusions, and effectively reduce the losses caused by security incidents when a security incident occurs. Users quickly resume normal business operations.