ISO/IEC 27003-2010 信息技术.安全技术.信息安全管理系统执行指南
作者:标准资料网
时间:2024-05-11 20:20:51
浏览:8658
来源:标准资料网
下载地址: 点击此处下载
【英文标准名称】:Informationtechnology-Securitytechniques-Informationsecuritymanagementsystemimplementationguidance
【原文标准名称】:信息技术.安全技术.信息安全管理系统执行指南
【标准号】:ISO/IEC27003-2010
【标准状态】:现行
【国别】:国际
【发布日期】:2010-02
【实施或试行日期】:
【发布单位】:国际标准化组织(IX-ISO)
【起草单位】:ISO/IECJTC1/SC27
【标准类型】:()
【标准水平】:()
【中文主题词】:计算机网络;计算机技术;计算机;数据交换;数据处理;数据保护;数据安全;数据存储保护;定义;文献;信息安全;信息系统;信息技术;说明书;IT安全;维护;管理;安全管理
【英文主题词】:Computernetworks;Computertechnology;Computers;Dataexchange;Dataprocessing;Dataprotection;Datasecurity;Datastorageprotection;Definitions;Documents;Informationsecurity;Informationsystems;Informationtechnology;Instructions;ITsecurity;Maintenance;Management;Securitymanagement
【摘要】:ThisInternationalStandardfocusesonthecriticalaspectsneededforsuccessfuldesignandimplementationofanInformationSecurityManagementSystem(ISMS)inaccordancewithISO/IEC27001:2005.ItdescribestheprocessofISMSspecificationanddesignfrominceptiontotheproductionofimplementationplans.ItdescribestheprocessofobtainingmanagementapprovaltoimplementanISMS,definesaprojecttoimplementanISMS(referredtointhisInternationalStandardastheISMSproject),andprovidesguidanceonhowtoplantheISMSproject,resultinginafinalISMSprojectimplementationplan.ThisInternationalStandardisintendedtobeusedbyorganizationsimplementinganISMS.Itisapplicabletoalltypesoforganization(e.g.commercialenterprises,governmentagencies,non-profitorganizations)ofallsizes.Eachorganization'scomplexityandrisksareunique,anditsspecificrequirementswilldrivetheISMSimplementation.SmallerorganizationswillfindthattheactivitiesnotedinthisInternationalStandardareapplicabletothemandcanbesimplified.Large-scaleorcomplexorganizationsmightfindthatalayeredorganizationormanagementsystemisneededtomanagetheactivitiesinthisInternationalStandardeffectively.However,inbothcases,therelevantactivitiescanbeplannedbyapplyingthisInternationalStandard.
【中国标准分类号】:L70
【国际标准分类号】:35_040
【页数】:76P.;A4
【正文语种】:英语
【原文标准名称】:信息技术.安全技术.信息安全管理系统执行指南
【标准号】:ISO/IEC27003-2010
【标准状态】:现行
【国别】:国际
【发布日期】:2010-02
【实施或试行日期】:
【发布单位】:国际标准化组织(IX-ISO)
【起草单位】:ISO/IECJTC1/SC27
【标准类型】:()
【标准水平】:()
【中文主题词】:计算机网络;计算机技术;计算机;数据交换;数据处理;数据保护;数据安全;数据存储保护;定义;文献;信息安全;信息系统;信息技术;说明书;IT安全;维护;管理;安全管理
【英文主题词】:Computernetworks;Computertechnology;Computers;Dataexchange;Dataprocessing;Dataprotection;Datasecurity;Datastorageprotection;Definitions;Documents;Informationsecurity;Informationsystems;Informationtechnology;Instructions;ITsecurity;Maintenance;Management;Securitymanagement
【摘要】:ThisInternationalStandardfocusesonthecriticalaspectsneededforsuccessfuldesignandimplementationofanInformationSecurityManagementSystem(ISMS)inaccordancewithISO/IEC27001:2005.ItdescribestheprocessofISMSspecificationanddesignfrominceptiontotheproductionofimplementationplans.ItdescribestheprocessofobtainingmanagementapprovaltoimplementanISMS,definesaprojecttoimplementanISMS(referredtointhisInternationalStandardastheISMSproject),andprovidesguidanceonhowtoplantheISMSproject,resultinginafinalISMSprojectimplementationplan.ThisInternationalStandardisintendedtobeusedbyorganizationsimplementinganISMS.Itisapplicabletoalltypesoforganization(e.g.commercialenterprises,governmentagencies,non-profitorganizations)ofallsizes.Eachorganization'scomplexityandrisksareunique,anditsspecificrequirementswilldrivetheISMSimplementation.SmallerorganizationswillfindthattheactivitiesnotedinthisInternationalStandardareapplicabletothemandcanbesimplified.Large-scaleorcomplexorganizationsmightfindthatalayeredorganizationormanagementsystemisneededtomanagetheactivitiesinthisInternationalStandardeffectively.However,inbothcases,therelevantactivitiescanbeplannedbyapplyingthisInternationalStandard.
【中国标准分类号】:L70
【国际标准分类号】:35_040
【页数】:76P.;A4
【正文语种】:英语
下载地址:
点击此处下载