当前位置: 网站首页 > 总站 > ISO27001认证 >
ISO27000认证系列标准介绍 发布时间: 2012-02-04 11:37 点击:

ISO27000认证系列标准介绍
ISO27000 certification series standards
ISO已为信息安全管理体系标准预留了ISO/IEC 27000系列编号,类似于质量管理体系的IS9000系列和环境管理体系ISO14000系列标准。   
ISO for information security management system standard for ISO / IEC series number 27000, similar to the quality management system of IS9000 series and ISO14000 series of environmental management system standard.
规划的ISO27000系列包含下列标准   
Planning ISO27000 series contains the following standards
ISO 27000 原理与术语Principles and vocabulary
ISO 27000 Principles and vocabulary principles and terminology
ISO 27001 信息安全管理体系—要求 ISMS Requirements (以BS 7799-2为基础)
ISO 27001 Information security management systems - Requirements ISMS Requirements (with BS 7799-2 based)
ISO 27002 信息技术—安全技术—信息安全管理实践规范 (ISO/IEC 17799:2005)
ISO 27002 information technology - Security techniques - Code of practice for information security management ( ISO / IEC 17799: 2005)
ISO 27003 信息安全管理体系—风险管理ISMS Risk management
ISO 27003 information security management system risk management ISMS Risk management
 ISO 27004 信息安全管理体系—指标与测量ISMS Metrics and measurement
ISO 27004 information security management systems - Measurement and ISMS Metrics and measurement
ISO 27005 信息安全管理体系—实施指南ISMS Implementation guidelines
ISO 27005 information security management system implementation guide ISMS Implementation guidelines
其中ISO27001:2005 的最终标准草案(FDIS)已经在2005年7月发布,预计在2005年底或2006年初作为正式国际标准发布。
The ISO27001: 2005 of the final draft international standard ( FDIS ) has been released in July 2005, is expected in late 2005 or early 2006 as the official release of international standards.