BS7799信息安全管理标准.docVIP

PAGE 13 PAGE 89 BS7799信息安全管理标准  Worldwide Standards Having trouble locating an overseas standard? BSI has the solution… WITH BSI, YOUR SEARCH IS OVER BEFORE IT’S EVEN BEGUN Worldwide Standards Direct is the fast, cost-effective standards service. Contact us on: e-mail:info@ Tel +44(0)20 8996 9001 Fax +44(0)20 8996 7001 Information security management— Part 1: Code of practice for information security management 信息安全管理 第一部分：信息安全管理惯例 目录 TOC \o \h \z \t 标题 7,7,标题 8,8,标题 9,9 HYPERLINK \l _Toc505768475 Worldwide Standards PAGEREF _Toc505768475 \h 2 HYPERLINK \l _Toc505768476 Having trouble locating an overseas standard? BSI has the solution… PAGEREF _Toc505768476 \h 2 HYPERLINK \l _Toc505768477 WITH BSI, YOUR SEARCH IS OVER BEFORE IT’S EVEN BEGUN PAGEREF _Toc505768477 \h 2 HYPERLINK \l _Toc505768478 第一部分：信息安全管理惯例 PAGEREF _Toc505768478 \h 3 HYPERLINK \l _Toc505768479 序 PAGEREF _Toc505768479 \h 14 HYPERLINK \l _Toc505768480 简介 PAGEREF _Toc505768480 \h 15 HYPERLINK \l _Toc505768481 什么是信息安全？ PAGEREF _Toc505768481 \h 15 HYPERLINK \l _Toc505768482 为什么需要信息安全 PAGEREF _Toc505768482 \h 15 HYPERLINK \l _Toc505768483 如何制定安全需求 PAGEREF _Toc505768483 \h 16 HYPERLINK \l _Toc505768484 评估信息风险 PAGEREF _Toc505768484 \h 16 HYPERLINK \l _Toc505768485 安全控制的选择 PAGEREF _Toc505768485 \h 16 HYPERLINK \l _Toc505768486 信息安全的出发点 PAGEREF _Toc505768486 \h 17 HYPERLINK \l _Toc505768487 重要的成功因素 PAGEREF _Toc505768487 \h 17 HYPERLINK \l _Toc505768488 开发你自己的指导方针 PAGEREF _Toc505768488 \h 17 HYPERLINK \l _Toc505768489 1.范围 PAGEREF _Toc505768489 \h 19 HYPERLINK \l _Toc505768490 2.术语与定义 PAGEREF _Toc505768490 \h 20 HYPERLINK \l _Toc505768491 2.1信息安全 PAGEREF _Toc505768491 \h 20 HYPERLINK \l _Toc505768492 2.2风险评估 PAGEREF _Toc505768492 \h 20 HYPERLINK \l _Toc505768493 2.3风险管理 PAGEREF _Toc505768493 \h 20 HYPERLINK \l _Toc505768494 3.安全策略 PAGEREF _Toc505768494 \h 21 HYPERLINK \l _Toc505768495 3.1信息安全策略 PAGEREF _Toc505768495 \h 21 HYPERLINK \l