GB/T 20274.3-2008 Information security technology—Evaluation framework for information systems security assurance—Part 3:Management assurance

Scope

This part of GB/T 20274 establishes a framework for ensuring the security management of information systems, and sets out guidelines and general principles for initiating, implementing, maintaining, evaluating, and improving information security management within organizations. This part defines and explains the security management capability levels that reflect an organization's ability to ensure information security management, as well as the requirements for management and security control categories that provide the content of information security management within organizations. This part is applicable to all users, developers, and evaluators of organizations involved in information system security management work.

Development Information

Same series standard

Referenced Standards

Related Standards