GB/T 25067-2016 Information technology—Security techniques—Requirements for bodies providing audit and certification of information security management systems

Scope

This standard sets requirements and provides guidance for organizations conducting audits and certifications of information security management systems (ISMS), serving as a supplement to the relevant requirements in ISO/IEC 17021:2011 and GB/T 22080-2008. The primary purpose of this standard is to support the accreditation of certification bodies providing ISMS certifications. Any organization offering ISMS certifications must demonstrate their compliance with the requirements of this standard in terms of competence and reliability. The guidelines in this standard provide further explanations of these requirements. Note: This standard can be used as a normative document for accreditation, peer review, or other audit processes.

Development Information

Replace the following standards

Superseded by the following standards

Referenced Standards

Adopt standards

Related Standards