GB/T 36316-2018 (English Version)

Standard No.: GB/T 36316-2018
Language: Chinese, Available in English version
Release Date: 2018
Published By: General Administration of Quality Supervision, Inspection and Quarantine of the People‘s Republic of China
Latest: GB/T 36316-2018

Scope: This standard specifies the overall framework, evaluation indicators, evaluation methods, result presentation, judgment rules, evaluation reports, and extended principles and methods of third-party software provider evaluation in e-commerce platform data opening. This standard applies to the evaluation of e-commerce third-party software providers.

Introduction

GB/T 36316—2018 Standard Overview

This standard specifies the overall framework and evaluation indicators, evaluation methods, result representation, judgment rules, evaluation reports, and extended principles and methods for the evaluation of third-party software providers in the data opening of e-commerce platforms.

Overall Evaluation Framework

The overall evaluation framework includes two parts: technical requirements and management requirements:

Technical Requirements: including three modules: function implementation, environment deployment, and usage guidance.
Management Requirements: including two modules: business management and operation and maintenance management.

rowspan="8">Environment deployment

Evaluation Category	Evaluation Module	Evaluation Sub-module	Evaluation Conditions
Technical Requirements	Function Implementation	Account System	Required Items
		Account Password	Required Items
		Session and Permission Management	Required Items
		Audit Management	Required Items
		Data Security	Required Items
	Server environment	Required items
	Database environment	Required items
	Administrative background	Required items

Implementation suggestions

To ensure the security and compliance of data opening on the e-commerce platform, it is recommended that third-party software providers:

Strictly carry out functional development and environment deployment in accordance with standard requirements.
Perform security self-inspections and technical assessments regularly.
Strengthen security awareness training for internal personnel.
Update and fix system vulnerabilities in a timely manner.

GB/T 36316-2018 Referenced Document

GB/T 18811-2012 Basic terms of electronic commerce
GB/T 35408-2017 Quality management in E-commerce—Terminology
GB/T 36318-2018 Data openness for E-commerce platform.General requirement

GB/T 36316-2018 history

2018 GB/T 36316-2018 Data openness for E-commerce platform—Third party software provider evaluation criteria