GB/T 22081-2008 Information technology—Security techniques—Code of practice for information security management

Scope

This standard provides guidelines and general principles for an organization to initiate, implement, maintain, and improve information security management. The objectives listed in this standard provide general guidance on the commonly accepted purposes of information security management. The implementation of the control objectives and control measures in this standard is designed to meet the requirements identified by risk assessment. This standard can serve as a practical guide for establishing an organization's security guidelines and effective security management practices, and help build mutual trust in activities between organizations.

Development Information

Replace the following standards

Superseded by the following standards

Adopt standards

Related Standards