【英文标准名称】:Informationtechnology-Securitytechniques-Requirementsforbodiesprovidingauditandcertificationofinformationsecuritymanagementsystems
【原文标准名称】:信息技术.安全技术.信息安全管理系统审计和认证机构的要求
【标准号】:BSISO/IEC27006-2007
【标准状态】:作废
【国别】:英国
【发布日期】:2007-03-30
【实施或试行日期】:2007-03-30
【发布单位】:英国标准学会(GB-BSI)
【起草单位】:BSI
【标准类型】:()
【标准水平】:()
【中文主题词】:验收;认可;认可团体;审计;合格证书;认证;认证机构;计算机网络;数据交换;数据处理;数据保护;数据安全;定义;信息安全;情报系统;信息技术;信息技术安全;管理;注册;安全管理;规范(验收)
【英文主题词】:Acceptance;Accreditation;Accreditationbodies;Auditing;Certificates;Certification;Certificationbodies;Computernetworks;Dataexchange;Dataprocessing;Dataprotection;Datasecurity;Definitions;Informationsecurity;Informationsystems;Informationtechnology;ITsecurity;Management;Registration;Securitymanagement;Specification(approval)
【摘要】:ThisInternationalStandardspecifiesrequirementsandprovidesguidanceforbodiesprovidingauditandcertificationofaninformationsecuritymanagementsystem(ISMS),inadditiontotherequirementscontainedwithinISO/IEC17021andISO/IEC27001.ItisprimarilyintendedtosupporttheaccreditationofcertificationbodiesprovidingISMScertification.TherequirementscontainedinthisInternationalStandardneedtobedemonstratedintermsofcompetenceandreliabilitybyanybodyprovidingISMScertification,andtheguidancecontainedinthisInternationalStandardprovidesadditionalinterpretationoftheserequirementsforanybodyprovidingISMScertification.NOTEThisInternationalStandardcanbeusedasacriteriadocumentforaccreditation,peerassessmentorotherauditprocesses.
【中国标准分类号】:A90
【国际标准分类号】:35_040
【页数】:46P.;A4
【正文语种】:英语