Information technology-Security techniques-Information security management systems-overviewand vocabulary
标准状态
基本信息
标准简介
ISO/IEC 27000:2018(E) Information technology -Security techniques — Information security management systems-overviewand vocabulary1 scopeThis document provides the overview of information security management systems (1SMS). It alsoprovides terms and definitions commonly used in the ISMs family of standards. This document isapplicable to all types and sizes of organization (e.g.commercial enterprises, government agencies, not-for-profit organizations).The terms and definitions provided in this document- cover commonly used terms and definitions in the ISMS family of standards;- do not cover all terms and definitions applied within the ISMS family of standards; and-do not limit the ISMS family of standards in defining new terms for use.2Normative referencesThere are no normative references in this document.3Terms and definitionslS0 and IEC maintain terminological databases for use in standardization at the following addresses:- ISO online browsing platform: available at https://www.iso.org/obp—IEC Electropedia: available at https:.//www.electropedia.org/3.1access controlmeans to ensure that access to assets is authorized and restricted based on business and securityrequirements ([3.5