Classified Protection of Cybersecurity

Introduction to Classified Protection of Cybersecurity ("CCSP") 2.0

CCSP, which is also known as Multi-Level Protection Scheme (MLPS), is a regulatory scheme designed to protect the cyber security of networks and systems in China. Under China Cybersecurity Law, it is required that the network operator in China must protect the network and the system components from interruption, damage, unauthorized access with a tiered concept to avoid any data leakage, manipulation, and being eavesdropped. It is legally compulsory that all companies and individuals who own, operate, or provide services relating to network and corresponding system components in China to follow the national standards under the CCSP scheme. CCSP was first introduced in 2008 and subsequently updated to CCSP 2.0 in 2019.

What Is New in CCSP 2.0?

There are several new technical and managerial requirement domains raised in CCSP 2.0 with an emphasis on the concept of "one center, three layers of defense". The adoption of the advanced secure mechanisms are also required under CCSP 2.0, such as the trusted techniques and security management center. In addition, on top of the general requirements, a set of additional security requirements are extended to five types of emerging technologies. A corporation is required to have its security defense, risk management, and contingency management established, implemented, and monitored in a more comprehensive way compared to those under CCSP 1.0.

Alibaba Cloud’s Compliance with CCSP 2.0

Alibaba Cloud, a pioneer in implementing CCSP 2.0, has had our public cloud platform evaluated and passed level III with an "Excellent" result.