标准编号:ISO/IEC 27002:2022
中文名称:信息技术 安全技术 信息安全控制实用规则
英文名称:Information security, cybersecurity and privacy protection — Information security controls
发布日期:2022-02
标准范围
This document provides a reference set of generic information security controls including implementation guidance. This document is designed to be used by organizations:
a) within the context of an information security management system (ISMS) based on ISO/IEC 27001;
b) for implementing information security controls based on internationally recognized best practices;
c) for developing organization-specific information security management guidelines.