Multi-Level Protection Scheme (MLPS)

The Multi-Level Protection Scheme (MLPS), also referred to as Classified Protection of Cybersecurity, is China’s mandatory tiered cybersecurity regime under which networks and information systems are classified into five protection levels. It applies to non-classified systems operated in China, including—but not limited to—critical information infrastructure. Its legal basis is the Cybersecurity Law of the PRCand the Measures for Information Security Classified Protection Management (Gongtongzi [2007] No. 43). Security design, remediation and graded assessments follow GB/T 22239-2019（Information security technology — Baseline for classified protection of cybersecurity）together with GB/T 28448-2019（Information security technology —Evaluation requirement for classified protection of cybersecurity） Operators classify systems by business impact and data sensitivity, file the classification with the local public security bureau (municipal level or above) to obtain a filing certificate, then engage a licensed evaluation body for periodic graded assessment. Corresponding technical controls, management policies and incident-response mechanisms are implemented to reduce cyber risk and maintain stable operation. Sungrow has completed official filing with local public security organs with valid filing numbers.