Under the state's ranked cybersecurity protection system, network operators must establish internal cybersecurity management systems and operating procedures, designate persons responsible for cybersecurity and implement responsibility systems; adopt technical measures against computer viruses, cyberattacks and intrusions; adopt technical measures to monitor and record network operational status and cybersecurity incidents and retain the network logs for no fewer than six months; adopt data categorisation, backups of important data and encryption; and perform other obligations laws and regulations prescribe, so that networks are protected from interference, damage and unauthorised access and network data from leakage, theft and tampering.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.