Frequently asked questions about CAC Cybersecurity Reviews

Frequently asked questions about CAC Cybersecurity Reviews

Terms & Conditions

活动对象:华为云电销客户及渠道伙伴客户可参与消费满送活动,其他客户参与前请咨询客户经理

活动时间: 2020年8月12日-2020年9月11日

活动期间,华为云用户通过活动页面购买云服务,或使用上云礼包优惠券在华为云官网新购云服务,累计新购实付付费金额达到一定额度,可兑换相应的实物礼品。活动优惠券可在本活动页面中“上云礼包”等方式获取,在华为云官网直接购买(未使用年中云钜惠活动优惠券)或参与其他活动的订单付费金额不计入统计范围内;

  • What are CAC cybersecurity reviews?

    The Cyberspace Administration of China (CAC) is China's central Internet regulator, oversight, and control agency. It organizes cybersecurity reviews that analyze the security and controllability of information service products and services provided within its border, including:


    1) Inherent security risks of products and services, as well as their risks of being controlled, interfered with, or interrupted by an unauthorized party.


    2) Supply chain security risks for products and their key components, from production and testing to delivery and technical support.


    3) Risks of unauthorized collection, storage, processing, and use of user information by product and service providers whilst in the process of providing these products and services.


    4) Risks of product and service providers compromising cybersecurity and harming user interests by taking advantage of the users' dependency on their products and services.


    5) Other risks that may endanger national security.


    Such reviews were proposed by the Office of the Central Leading Group for Cyberspace Affairs in December 2014 as it issued "opinions on strengthening the cybersecurity administration of cloud computing services" provided to Chinese government agencies and affiliated organizations. The issued document stipulates that third-parties shall be invited to conduct such reviews based on China's national standards on cybersecurity.

  • Which Huawei Cloud services have passed CAC cybersecurity reviews?

    Huawei Cloud's e-Government cloud platform has passed this security review (enhanced edition). The enhanced review uses exceptionally stringent standards and covers all aspects of the examined solution, including development, supply chain security, system and communication protection, maintenance, emergency response and disaster recovery, auditing, risk assessment, and continuous monitoring. The review shows that Huawei Cloud's e-Government cloud platform has created a robust, full-lifecycle cybersecurity management system to meet the most stringent security requirements for the e-Government sector.


    In addition, Huawei Cloud periodically reviews its information security management systems based on changing conditions, so Huawei Cloud services will always be protected by industry-leading cybersecurity management capabilities.


    You can view Huawei Cloud's cybersecurity review records on the official CAC website.


    If you would like to learn more about our products, please contact us.