標(biāo)準(zhǔn)號(hào)：ISO/IEC 27003-2010
中文標(biāo)準(zhǔn)名稱(chēng)：信息技術(shù).安全技術(shù).信息安全管理系統(tǒng)執(zhí)行指南
英文標(biāo)準(zhǔn)名稱(chēng)：Information technology - Security techniques - Information security management system implementation guidance
標(biāo)準(zhǔn)類(lèi)型：L70
發(fā)布日期：1999/12/31 12:00:00
實(shí)施日期：1999/12/31 12:00:00
中國(guó)標(biāo)準(zhǔn)分類(lèi)號(hào)：L70
國(guó)際標(biāo)準(zhǔn)分類(lèi)號(hào)：35.040
引用標(biāo)準(zhǔn)：ISO/IEC 27000-2009;ISO/IEC 27001-2005
適用范圍：This International Standard focuses on the critical aspects needed for successful design and implementationof an Information Security Management System (ISMS) in accordance with ISO/IEC 27001:2005. It describesthe process of ISMS specification and design from inception to the production of implementation plans. Itdescribes the process of obtaining management approval to implement an ISMS, defines a project toimplement an ISMS (referred to in this International Standard as the ISMS project), and provides guidance onhow to plan the ISMS project, resulting in a final ISMS project implementation plan.This International Standard is intended to be used by organizations implementing an ISMS. It is applicable toall types of organization (e.g. commercial enterprises, government agencies, non-profit organizations) of allsizes. Each organization's complexity and risks are unique, and its specific requirements will drive the ISMSimplementation. Smaller organizations will find that the activities noted in this International Standard areapplicable to them and can be simplified. Large-scale or complex organizations might find that a layeredorganization or management system is needed to manage the activities in this International Standardeffectively. However, in both cases, the relevant activities can be planned by applying this InternationalStandard.