China Classification society

Security Policy

date:01,07,2020

CCS SCF Archive Center implements rigorous secure storage, rigid management and security IPR protection policies.

1. A qualified quality management system fully in compliance with ISO9001:2005 and IEC27001:2005 standards was introduced to this Center, periodically monitoring and measuring and annual review shall be implemented strictly.

2. All staff of this center is required to issue the long-term confidentially agreements. Periodical inspection for IPR protection shall be held.

3. The Database, IT system and Web service of this center shall be monitored by designated staff playing as an independent role.

4. All sensitive IPR information shall be secure storage offline, an Advanced Encryption Standard (AES-256bit or higher) was introduced during the ship’s lifetime, provided with fragmentation as necessary and sufficient.

5. All documents and drawings shall be encrypted specially in accordance with their IP level.

6. A rigid user authentication management was introduce, all user access tracks shall be monitored and recorded.

7. A specific browser software specially for access right holder was developed to strictly protect customer information and IPR information.

8. A third-party shall be invited to join in the annual information security review, proper actions and measurements shall be made if necessary.