ISO/IEC 27014:2020 信息安全，网络安全和隐私保护 信息安全的治理

标准编号：ISO/IEC 27014:2020

中文名称：信息安全，网络安全和隐私保护 信息安全的治理

英文名称：Information security, cybersecurity and privacy protection — Governance of information security

发布日期：2020-12

标准范围

This document provides guidance on concepts, objectives and processes for the governance of 
information security, by which organizations can evaluate, direct, monitor and communicate the 
information security-related processes within the organization.
The intended audience for this document is:
— governing body and top management;
— those who are responsible for evaluating, directing and monitoring an information security 
management system (ISMS) based on ISO/IEC 27001;
— those responsible for information security management that takes place outside the scope of an 
ISMS based on ISO/IEC 27001, but within the scope of governance.
This document is applicable to all types and sizes of organizations.
All references to an ISMS in this document apply to an ISMS based on ISO/IEC 27001.
This document focuses on the three types of ISMS organizations given in Annex B. However, this 
document can also be used by other types of organizations.

标准预览图