1. Preparation Phase (2-4 Weeks)
1. Learn about certification requirements
Research relevant regulations and standards:
- Measures for Electronic Bidding and Tendering
- Technical Specifications for Electronic Bidding Systems
- Cybersecurity Law and Supporting Regulations
- GB/T Series National Standards
2. Self-assessment
Conduct self-assessment against standard requirements:
- System Functional Completeness
- Reasonableness of Technical Architecture
- Security Measures
- Data Management Capability
2. Detection Phase (Weeks 6-10)
1. Select testing agency
Select a testing agency with relevant qualifications.
2. System Test
Test content includes:
- Functional Testing (Bidding, Tender Submission, Bid Opening, Evaluation, Award)
- Performance Testing (Concurrent Users, Response Time)
- Security Testing (Authentication, Data Encryption, Access Control)
- Compatibility Testing (Browsers, Operating Systems)
- Reliability Testing (Stability, Fault Tolerance)
3. Test Report
Provide a test report compliant with the electronic bidding system technical specifications.
3. Application Phase (1-2 Weeks)
1. Submit application materials
Required Materials:
- Certification Application
- Business License Copy
- System Description and Technical Documentation
- Test Report
- Certificate of Filing for Classified Protection of Cybersecurity
- Quality Management System Certificate (if applicable)
4. Evaluation Phase (2-4 weeks)
1. File Review
Certification authority reviews submitted documents.
2. On-site audit
Review includes:
- System Development and Operations Team
- Data Center and Infrastructure
- Security Management System
- Emergency Plan and Drill Records
- User Services and Complaint Handling
3. Authentication Decision
The Certification Authority's Technical Committee makes the certification decision.
V. Post-Certification Maintenance
- Undergo annual supervision and inspection
- Report promptly during major system changes
- Certificate valid for 3 year(s). Renew before expiration.
VI. Timeline
| Stage | Time | Key Deliverables |
|---|---|---|
| Ready | 2-4 weeks | Self-Assessment Report |
| Detect | 6-10 weeks | Test Report |
| Apply | 1-2 weeks | Application materials |
| Rate | 2-4 weeks | Certification |
| Total | 11-20 weeks | About 3-5 months |
7. Cost Reference
- Detection Fee: 50000-150000 CNY (based on system scale and complexity)
- Verification fee: 30000-80000 CNY
- Annuity: 10000-30000 per year
8. Value of Certification
- Comply with legal and regulatory requirements
- Obtain operational license
- Enhance platform credibility and user trust
- Participate in government procurement and state-owned enterprise projects
- Reduce legal and operational risks
Source: Mengzheng Certification
