【中英文对照版】商用密码检测机构管理办法.docx

商用密码检测机构管理办法MeasuresfortheAdministrationofCommercialCryptographyTestingInstitutions制定机关：国家密码管理局发文字号：国家密码管理局令第2号公布日期：2023.09.26施行日期：2023.11.01效力位阶：部门规章法规类别：商用密码IssuingAuthority：StateEncryptionAdministrationDocumentNumber：OrderNo.2oftheStateCryptographyAdministrationDateIssued：09-26-2023EffectiveDate：11-01-20231.evelofAuthority：DepartmentalRulesAreaofLaw：CommercialCryptographyOrderoftheStateCryptographyAdministration国家密码管理局令(No.2)（第2号）TheMeasuresfortheAdministrationofCommercialCryptographyTestingInstitutions,asdeliberatedandadoptedattheexecutivemeetingoftheStateCryptographyAdministrationonSeptember11,2023,areherebyissuedandshallcomeintoforceonNovember1,2023.商用密码检测机构管理办法已经2023年9月11日国家密码管理局局务会议审议通过，现予公布，自2023年11月1日起施行。Director:LiuDongfang局长刘东方September26,20232023年9月26日商用密码检测机构管理办法第一条为了加强商用密码检 测机构管理，规范商用密码检测活 动，根据中华人民共和国密码 法、商用密码管理条例等有关 法律法规，制定本办法。第二条 商用密码检测机构的 资质认定和监督管理适用本办法。第三条从事商用密码产品检 测、网络与信息系统商用密码应用安 全性评估等商用密码检测活动，向社 会出具具有证明作用的数据、结果的 机构，应当经国家密码管理局认定， 依法取得商用密码检测机构资质。第四条 国家密码管理局负责 全国商用密码检测机构的资质认定和 监督管理。县级以上地方各级密码管 理部门负责本行政区域内商用密码检 测机构的监督管理。第五条商用密码检测机构应MeasuresfortheAdministrationofCommercialCryptographyTestingInstitutionsArticle1TheseMeasuresaredevelopedinaccordancewiththeCryptographyLawofthePeople,sRepublicofChina,theRegulationontheAdministrationofCommercialCryptography,andotherrelevantlawsandregulationstostrengthentheadministrationofcommercialcryptographytestinginstitutionsandregulatecommercialcryptographytestingactivities.Article2TheseMeasuresshallapplytothequalificationaccreditationofcommercialcryptographytestinginstitutionsandthesupervisionandadministrationthereof.Article3Institutionscarryingoutcommercialcryptographytestingactivitiessuchasthetestingofcommercialcryptographyproductsandthesecurityassessmentofcommercialcryptographyapplicationofnetworkandinformationsystems,andprovidingdataandresultswiththefunctionofprooftothepublicshallbeaccreditedbytheStateCryptographyAdministration(SCA)andobtainthequalificationofacommercialcryptographytestinginstitutioninaccordancewiththelaw.Article4TheSCAshallberesponsibleforthequalificationaccreditationofcommercialcryptographytestinginstitutionsnationwideandthesupervisionandadministrationthereof.Thelocalcryptographyadministrationatorabovethecountylevelshallberesponsibleforthesupervisionandadministrationofcommercialcryptographytestinginstitutionswithinitsadministrativeregion.Article 5 Acommercialcryptographytestinginstitutionshallconductcommercialcryptographytestingactivitieswithinthescopeofitsqualificationaccreditationservices.TheSCAshalldevelopandpublishthebasicstandardsforthequalificationaccreditationofcommercialcryptographytestinginstitutionsandthebusinessscopeofqualificationaccreditationofcommercialcryptographytestinginstitutions.Article 6 Toobtainthequalificationofacommercialcryptographytestinginstitution,aninstitutionshallmeetthefollowingconditions:(1) Itisqualifiedasalegalperson.(2) Ithasadequatefundstoconductcommercialcryptographytestingactivities.(3) Ithasbeenformedfortwoormoreyears,engagedintherelevantworkinthefieldofcybersecuritytestingandappraisalforoneyearormore,andhasnorecordsofmajorviolationsoflaworbadcreditrecords.(4) Ithaspremisessuitableforconductingcommercialcryptographytestingactivities.(5) Ithasequipmentandfacilitiessuitableforconductingcommercialcryptographytestingactivities.(6) Ithasamanagementsystemthatensurestheindependence,impartiality,Scientificity,andintegrityofcommercialcryptographytestingactivities.当在资质认定业务范围内从事商用密 码检测活动。国家密码管理局制定并 公布商用密码检测机构资质认定基本 规范和商用密码检测机构资质认定'也 务范围。第六条取得商用密码检测机 构资质，应当符合下列条件：（一）具有法人资格;（二）具有与从事商用密码检测活动 相适应的资金；（三）成立2年以上，从事网络安全 检测评估领域相关工作1年以上，无 重大违法或者不良信用记录；（四）具有与从事商用密码检测活动 相适应的场所；（五）具有与从事商用密码检测活动 相适应的设备设施；（六）具有保证商用密码检测活动独 立、公正、科学、诚信的管理体系；（七）具有与从事商用密码检测活动(7) Ithasprofessionalsqualifiedforconductingcommercialcryptographytestingactivities.(8) Ithasprofessionalcapabilitiessuitableforconductingcommercialcryptographytestingactivities.Ifaforeign-fundedenterpriseasalegalpersonappliesforthequalificationofacommercialcryptographytestinginstitution,itshallcomplywiththeprovisionsofrelevantlawsandregulationsofthestateonforeigninvestment,inadditiontotheaforesaidconditions.Article7AnapplicantforthequalificationofacommercialcryptographytestinginstitutionshallfileawrittenapplicationwiththeSCAandsubmittheApplicationFormfortheQualificationofaCommercialCryptographyTestingInstitutiontogetherwiththefollowingmaterialstothecryptographyadministrationoftheprovince,autonomousregion,ormunicipalitydirectlyundertheCentralGovernmentthathasbeenentrustedbytheSCAtoaccepttheapplication,andtheof(1) applicantshallberesponsiblefortheveracitythesubmittedmaterials:(2) 1.egalPersonQualificationCertificate.(3) Capitalstructureandequityinformation.(4) Anundertakingthatithasnomajorviolationoflaworbadcreditrecordsandwillnotengageinactivitiesthatmayaffectthefairnessandim