ISO/IEC 27003-2010 信息技术.安全技术.信息安全管理系统执行指南

标准号：ISO/IEC 27003-2010
中文标准名称：信息技术.安全技术.信息安全管理系统执行指南
英文标准名称：Information technology - Security techniques - Information security management system implementation guidance
标准类型：L70
发布日期：1999/12/31 12:00:00
实施日期：1999/12/31 12:00:00
中国标准分类号：L70
国际标准分类号：35.040
引用标准：ISO/IEC 27000-2009;ISO/IEC 27001-2005
适用范围：This International Standard focuses on the critical aspects needed for successful design and implementationof an Information Security Management System (ISMS) in accordance with ISO/IEC 27001:2005. It describesthe process of ISMS specification and design from inception to the production of implementation plans. Itdescribes the process of obtaining management approval to implement an ISMS, defines a project toimplement an ISMS (referred to in this International Standard as the ISMS project), and provides guidance onhow to plan the ISMS project, resulting in a final ISMS project implementation plan.This International Standard is intended to be used by organizations implementing an ISMS. It is applicable toall types of organization (e.g. commercial enterprises, government agencies, non-profit organizations) of allsizes. Each organization's complexity and risks are unique, and its specific requirements will drive the ISMSimplementation. Smaller organizations will find that the activities noted in this International Standard areapplicable to them and can be simplified. Large-scale or complex organizations might find that a layeredorganization or management system is needed to manage the activities in this International Standardeffectively. However, in both cases, the relevant activities can be planned by applying this InternationalStandard.