Thoughts about Information Security (2)


信息安全管理ISO/IEC 27001

1.信息安全策略

2.信息安全组织

3.人力资源安全

4.资产管理

5.访问控制

6.密码控制

7.物理与环境安全

8.运行安全

9.通信安全

10.系统获取、开发和维护

11.供应商关系

12.信息安全事件管理

13.业务连续性管理的信息安全方面

14.符合性



Information Security Management ISO / IEC 27001

Information security policy

2. Information Security Organization

3. Human resources security

4. Asset management

5. Access Control

6. Password control

7. Physical and environmental security

8. Operational safety

9. Communication Security

10. System acquisition, development and maintenance

11.Supplier relationship

12. Information Security Incident Management

13. Information security aspects of business continuity management

14. Compliance


评论

热度(8)