GB/T 20985.1-2017 Information technology—Security techniques—Information security incident management—Part 1:Principles of incident management

Scope

This part of GB/T 20985 proposes the basic concepts and process stages of information security incident management, and combines these concepts with the principles of structured methods to identify, report, evaluate, and respond to incidents, as well as to summarize experiences. The incident management principles presented in this part are universal and applicable to organizations of any type, scale, or nature. Organizations can adjust the guidelines provided in this part according to the type, scale, and nature of their businesses, as well as the associated information security risk situation. This part is also applicable to external organizations that provide information security incident management services.

Development Information

Replace the following standards

Referenced Standards

Adopt standards

Related Standards