Information technology — Security techniques — Information security management systems — Requirement- Context of the organization
信息安全管理體系要求-組織環(huán)境
 
3Context of the organization
3組織環(huán)境
3.1Understanding the organization and its context
3.1理解組織及其環(huán)境
The organization shall determine external and internal issues that are relevant to its purpose and that affect its ability to achieve the intended outcome(s) of its information security management system.
組織應(yīng)確定與其目標(biāo)相關(guān)并影響其實(shí)現(xiàn)信息安全管理體系預(yù)期結(jié)果的能力的外部和內(nèi)部問(wèn)題。
NOTE Determining these issues refers to establishing the external and internal context of the organization considered in Clause 5.4.1 of ISO 31000:2018.
注：確定這些問(wèn)題涉及到建立組織的外部和內(nèi)部環(huán)境，在 ISO 31000:2018的5.4.1 中考慮了這一事項(xiàng)。
3.2Understanding the needs and expectations of interested parties 
3.2 理解相關(guān)方的需求和期望
The organization shall determine:
a)interested parties that are relevant to the information security management system;
b)the relevant requirements of these interested parties;
c)which of these requirements will be addressed through the information security management system.
NOTE The requirements of interested parties can include legal and regulatory requirements and contractual obligations.
組織應(yīng)確定：
a)與信息安全管理體系有關(guān)的相關(guān)方；
b)這些相關(guān)方與信息安全有關(guān)的要求
c)其中哪些要求將通過(guò)信息安全管理系統(tǒng)來(lái)解決。
注：相關(guān)方的要求可能包括法律法規(guī)要求和合同義務(wù)。
3.3Determining the scope of the information security management system
3.3 確定信息安全管理體系的適用范圍
The organization shall determine the boundaries and applicability of the information security management system to establish its scope.
When determining this scope, the organization shall consider:
a)the external and internal issues referred to in 4.1;
b)the requirements referred to in 4.2;
c)interfaces and dependencies between activities performed by the organization, and those that are performed by other organizations.
The scope shall be available as documented information.
組織應(yīng)確定信息安全管理體系的邊界和適用性，以建立其范圍。
當(dāng)確定該范圍時(shí)，組織應(yīng)考慮：
a)在4.1中提及的外部和內(nèi)部問(wèn)題；
b)在4.2中提及的要求；
c)組織所執(zhí)行的活動(dòng)之間以及與其它組織的活動(dòng)之間的接口和依賴性
該范圍應(yīng)文件化并保持可用性。
3.4Information security management system
3.4信息安全管理體系
The organization shall establish, implement, maintain and continually improve an information security man
 
溫馨提示：獲取完整版ISO27001最新2022版中英文對(duì)照資料，可咨詢中培課程顧問(wèn)或撥打客服電話了解18513851518