lnformation technology-Security techniques-Code of practice for information security management

标准状态

基本信息

标准简介

ISO/IEC 17799:2005(E) lnformation technology -Security techniques-Code of practice for information security management1ScopeThis International Standard establishes guidelines and general principles for initiating,implementing,maintaining. and improving information security management in an organization."The objectivesoutlined in this International Standard provide general guidance on the commonly accepted goals ofinformation security management.The control objectives and controls of this International Standard are intended to be implemented tomeet the requirements identified by a risk assessment. This International Standard may serve as apractical guideline for developing organizational security standards and effective security managementpractices and to help build confidence in inter-organizational activities.2 Terms and definitionsFor the purposes of this document, the following terms and definitions apply.2.1assetanything that has value to the organization[ISO/IEC 13335-1:2004]2.2controlmeans of managing risk,including policies，procedures，guidelines，practices or organizationalstructures, which can be of administrative, technical, management, or legal natureNOTE Control is also u

内容预览