Information networks that store and process important data in the energy industry should implement level 3 and above network security protection requirements. Information networks that store and process core data in the energy industry, such as critical information infrastructure, should implement critical information infrastructure security protection requirements on the basis of a network security level protection system; where critical information infrastructure is not involved, they should implement four-level network security level protection requirements. Where laws, regulations and relevant national regulations require the use of commercial passwords for protection, they shall also comply with the relevant regulations on commercial password protection.

Information networks that store and process important data in the energy industry should implement level 3 and above network security protection requirements. Information networks that store and process core data in the energy industry, such as critical information infrastructure, should implement critical information infrastructure security protection requirements on the basis of a network security level protection system; where critical information infrastructure is not involved, they should implement four-level network security level protection requirements. Where laws, regulations and relevant national regulations require the use of commercial passwords for protection, they shall also comply with the relevant regulations on commercial password protection.