GB/T 22081-2008

This standard provides guidelines and general principles for an organization to initiate, implement, maintain, and improve information security management. The objectives listed in this standard provide general guidance on the commonly accepted purposes of information security management. The implementation of the control objectives and control measures in this standard is designed to meet the requirements identified by risk assessment. This standard can serve as a practical guide for establishing an organization's security guidelines and effective security management practices, and help build mutual trust in activities between organizations.