China Issued National Standard GB/T 47000-2025 Technical Specification for Elevator Cybersecurity
On December 12, 2025, the State Administration for Market Regulation and the Standardization Administration of China officially issued the national standard GB/T 47000-2025 Technical Specification for Elevator Cybersecurity, which will be officially implemented on June 1, 2026. This standard is China's first special national standard for elevator cybersecurity in the elevator industry. The core contents include: First, clarify the scope of application of the standard, covering elevators, escalators and moving walks equipped with intelligent control systems, network communication functions, and remote monitoring functions, applicable to the cybersecurity management of the whole life cycle of equipment design, manufacture, installation, operation and maintenance, and scrapping. Second, establish an elevator cybersecurity classification system. According to the elevator use scenario, safety risk level and functional importance, the elevator cybersecurity is divided into four grades, and differentiated security protection requirements are formulated for different grades. Third, refine the technical requirements for elevator cybersecurity, formulate comprehensive technical protection standards from five dimensions: physical security, network communication security, equipment security, application security and data security, and clarify the mandatory requirements for identity authentication, access control, data encryption, intrusion prevention, malicious code protection and security audit. Fourth, add elevator software security requirements, and formulate a whole life cycle security management specification for software security development, version management, software update and vulnerability repair for elevator embedded software, control system software and application software. Fifth, standardize the requirements for elevator data security and privacy protection, clarify the security guidelines for the collection, storage, transmission, use and destruction of elevator operation data, maintenance data and personal information, and prohibit illegal collection, leakage and abuse of user personal information. Sixth, refine the security requirements for remote operation and maintenance of elevators, formulate special security protection standards for elevator remote monitoring, remote debugging and remote software update scenarios, and clarify the authority control, operation audit and emergency disposal requirements for remote operations. Seventh, standardize the requirements for elevator cybersecurity testing and assessment, formulate the testing methods, risk assessment process and qualification criteria for elevator cybersecurity, and clarify the annual assessment requirements for elevator cybersecurity. Eighth, standardize the requirements for emergency disposal of elevator cybersecurity incidents, and formulate the emergency response process, disposal measures, post-event recovery and traceability management specifications for cybersecurity incidents. The release of this standard fills the gap of national standards for elevator cybersecurity in China's elevator industry, provides a unified technical basis for cybersecurity protection of smart elevators, and comprehensively improves the cybersecurity protection level of smart elevators in China.