— Security techniques — Information security management systems — RequirementsTechnologies de l’information — Techniques de sécurité — Systèmes de management de la sécurité de l’information — Exigences© ISO/IEC 2013ISO/IEC27001INTERNATIONAL STANDARDReference numberISO/IEC FDIS 27001:2013(E)...
第二版进行了技术上的修订,并取消和替代第一版(ISO/IEC 27001:2005)。 0 Introduction 引言 0.1 General 0.1 总则 This International Standard has been prepared to provide requirements for establishing, implementing, maintaining and continually improving an information security management system. The adoption ...
ISO/IEC 27001 is a security standard that formally specifies an Information Security Management System (ISMS) that is intended to bring information security under explicit management control. As a formal specification, it mandates requirements that define how to implement, monitor, maintain, and continu...
ISO/IEC 27001:2013(E)A.11.2 EquipmentObjective: To prevent loss, damage, theft or compromise of assets and interruption to the organiza-tion’s operations.A.11.2.1Equipment siting and protectionControlEquipment shall be sited and protected to reduce the risks from environmental threats and hazards...
iso27001-2013标准 系统标签: ieciso标准securityorganizationjtc Informationtechnology—Securitytechniques —Informationsecuritymanagementsystems-Requirements 信息技术—安全技术-信息安全管理体系-要求 Foreword 前言 ISO(theInternationalOrganizationforStandardization)andIEC(theInternational ElectrotechnicalCommission)formthespeciali...
ISO27001:2013全套程序文件英文版 ISO 27001:2013 Full Set of Procedure Documents in English ISO 27001:2013 is an internationally recognized standard for information security management systems(ISMS) It provides a framework and set of guidelines to help organizations manage and protect their information ...
第二版进行了技术上的修订,并取消和替代第一版(ISO/IEC27001:20KK)。 0Introduction 引言 0.1General 0.1总则 ThisInternationalStandardhasbeenpreparedtoproviderequirementsforestablishing,implementing,maintainingandcontinuallyimprovinganinformationsecuritymanagementsystem.Theadoptionofaninformationsecuritymanagementsystemisastrat...
1、ISO27001:2013 新版信息安全管理体系标准变化精解 关于标准 基本情况 关于新版 内容精解 关于换证 解决方案 ISO27001:2005改版ISO27001:2013 现版的信息安全管理体系ISO27001:2005标准 已经使用了8年,日前ISO组织(国际标准化组织) 终于将新版ISO27001:2013DIS版(国际标准草案 Draft International Standard)草稿向公众...
26 ISO/IEC 27001:2013(E 发布; A.18.1.4 隐私和保护个人身份信息 控制措施 隐私和保护个人身份信息应确保遵守相关的 法律法规的要求; A.18.1.5 密码控制 措施的规则 控制措施 使用密码控制措施应遵从相关的协议、 法律和 法规; A.18.2 信息安全审查 控制目标:确保根据组织策略和程序运行和实 施信息安全; A...
ISO27001_2013新版解析