ISO / IEC 27001: 2013 - 信息安全管理系统

ISO / IEC 27001: 2013 is the international standard for organizations that want to achieve their goals of information security.

This standard specifies requirements for establishing, implementing, maintaining and continuous improvement systems management of information security in the context of the organization. The standard necessary for information security risk assessment and treatment of these risks (so-called "treatment" of risks) by means of information security controls, is a reliable basis to ensure the confidentiality, availability and integrity of relevant information and achieve the desired security goals.

ISO / IEC 27001: 2013 provides a framework to apply policies, procedures and measures (including physical, legal, and technical security measures listed in Appendix A of the standards and / or other registries, or developed by the organization itself) in the information risk management processes of the organization.