GB/T22080/ISO/IEC27001《信息技术 安全技术 信息安全管理体系要求》

GB / t22080 / ISO / IEC27001 requirements for information technology security management system

随着以计算机和网络通信为代表的信息技术的迅猛发展，信息的保护及防范信息的损坏和泄露成为当前组织迫切需要解决的问题。

With the rapid development of information technology represented by computer and network communication, information protection and preventing information damage and leakage have become an urgent problem to be solved by the current organization.

许多信息系统本身并不是按照安全系统的要求来设计的，仅依靠技术手段来实现信息安全有其局限性。

Many information systems are not designed according to the requirements of security system. It has its limitations to only rely on technical means to realize information security.

我们需要一个系统的、整体规划的信息安全管理体系，从预防控制的角度出发，保障组织的信息系统与业务的安全与正常运作。

We need a systematic and overall planned information security management system to ensure the safety and normal operation of the organization's information system and business from the perspective of prevention and control.

信息安全管理体系（ISMS）是组织机构单位按照信息安全管理体系相关标准的要求，制定信息安全管理方针和策略，采用风险管理的方法进行信息安全管理计划、实施、评审检查、改进的信息安全管理执行的工作体系。

Information security management system (ISMS) is a work system in which organizations and units formulate information security management policies and strategies according to the requirements of relevant standards of information security management system, and use risk management methods to plan, implement, review, inspect and improve information security management.

认证标准：GB/T 22080/ISO/IEC 27001《信息技术 安全技术 信息安全管理体系要求》

Certification standard: GB / T 22080 / ISO / IEC 27001 Information technology security management system requirements