Don’t do SECURITY. Do business SECURELY.
Threat intelInsightsBook a consultation
Back to all insights

China’s MLPS 2.0 standards take effect

China’s updated Multi-Level Protection Scheme standards now apply to cloud, mobile, IoT and industrial control systems.

China’s Multi-Level Protection Scheme 2.0 (MLPS 2.0) national standards, including GB/T 22239-2019, take effect today.

Key points

  • All network operators must grade their systems from level 1 to 5.
  • Systems at level 2 and above must be filed with the Public Security Bureau.
  • Testing and evaluation are required for level 3 and above.
  • Coverage extends to cloud, mobile, IoT, industrial control systems and big data.

UK organisations running systems in China, including cloud workloads, need to classify systems and implement graded controls. MLPS 2.0 is enforced under the Cybersecurity Law.

Source: GB/T 22239-2019 MLPS 2.0 baseline requirements (SAMR)

Need help understanding what this change means for your organisation? Get in touch for a pragmatic, no-obligation conversation.

Get our weekly insights by emailA free weekly threat and vulnerability round-up with a link to our threat log spreadsheet, plus legal, regulatory, standards, and AI updates.
Subscribe free

How we can help: consulting, auditing, and AI governance. Book a complimentary consultation.

More insights