ISO/IEC 18045-2022-EN-信息技术.信息安全，网络安全和隐私保护.组织隐私风险管理.pdf

INTERNATIONALISO/IECSTANDARD18045Thirdedition2022-08Informationsecurity,cybersecurityandprivacyprotection—EvaluationcriteriaforITsecurity—MethodologyforITsecurityevaluationSécuritédelinformation,cybersécuritéetprotectiondelavieprivée—Critèresdévaluationpourlasécuritédestechnologiesdelinformation—MéthodologiepourlévaluationdesécuritéReferencenumberISO/IEC18045:2022(E)--``,,,,`,,```,,,,,``,````,``,,,-`-`,,`,,`,`,,`CopyrightInternationalOrganizationforStandardization©ISO/IEC2022

ISO/IEC18045:2022(E)---`,,`,`,,`,,`-`-,,,``,````,``,,,,,```,,`,,,,``--COPYRIGHTPROTECTEDDOCUMENT©ISO/IEC2022Allrightsreserved.Unlessotherwisespecified,orrequiredinthecontextofitsimplementation,nopartofthispublicationmaybereproducedorutilizedotherwiseinanyformorbyanymeans,electronicormechanical,includingphotocopying,orpostingontheinternetoranintranet,withoutpriorwrittenpermission.PermissioncanberequestedfromeitherISOattheaddressbeloworISO’smemberbodyinthecountryoftherequester.ISOcopyrightofficeCP401•Ch.deBlandonnet8CH-1214Vernier,GenevaPhone:+41227490111Email:copyright@Website:PublishedinSwitzerlandii©ISO/IEC2022–AllrightsreservedCopyrightInternationalOrganizationforStandardization

ISO/IEC18045:2022(E)TableofContentsLISTOFFIGURESixLISTOFTABLESxFOREWORDxiINTRODUCTIONxiiSCOPE1NORMATIVEREFERENCES1TERMSANDDEFINITIONS1ABBREVIATEDTERMS4--``,,TERMINOLOGY4,,`,,```,,VERBUSAGE4,,,``,````GENERALEVALUATIONGUIDANCE5,``,,,-`-`RELATIONSHIPBETWEENTHEISO/IEC15408SERIESANDISO/IEC18045STRUCTURES5,,`,,`,`,,EVALUATIONPROCESSANDRELATEDTASKS5`---9.1GENERAL59.2EVALUATIONPROCESSOVERVIEW69.2.1Objectives69.2.2Responsibilitiesoftheroles69.2.3Relationshipofrole