ISO27001相關術語
發布時間：2025-07-16 點擊：23
ISO27001相關術語
信息安全
¨[ISO/IEC17799:2000]
Preservation of confidentiality,integrity and availability of information.
保持信息的保密性?完整性和可用性?
¨[ISO/IEC17799:2005]
Preservation of confidentiality,integrity and availability of information;inaddition,other properties,such as authenticity,accountability,non-repudiation and reliability canals obeinvolved.
保持信息的保密性?完整性和可用性;另外,還包括真實性?可核查性?抗抵賴和可靠性?
保密性
¨[ISO/IEC13335-1:2004]
The property that information is not made available or disclosed to unauthorized individuals,entities,orprocesses.
使信息不泄露給未授權的個人?實體?過程或不使信息為其利用的特性?
完整性
¨[ISO/IEC13335-1:2004]
Integrity:the property of safe guarding the accuracy and completeness of assets.
保護資產準確性和完備性的特性?
可用性
¨[ISO/IEC13335-1:2004]
Availability:the property of being accessible and usable upondemand by an authorizedentity.
已授權實體一旦需要就可訪問和使用的特性?
資產
[ISO/IECTR13335-1:2004]
Asset:anything that has value to the organization.
任何對組織有價值的東西?
威脅
¨[ISO/IECTR13335-1:2004]
Threat:apotential cause of an unwanted incident that may result in harm to a system or organization.
可能對系統或組織造成損害的事件的潛在原因?
薄弱點
¨[ISO/IECTR13335-1:2004]
Vulnerability:a weakness of an asset or group of assets that can be exploited by one or more threats.
指資產或資產組的能被威脅利用的薄弱點?
風險
¨[ISOGuide73:2002]
Risk:combination of the probability of an event and its consequence.
指事件發生的可能性及后果的結合
風險管理
¨[ISO/IEC17799:2000]
Process of identifying,controlling and minimizing or eliminating security risks that may affect information systems,for an acceptable cost.
以可接受的費用識別?控制?降低或消除可能影響信息系統的安全風險的過程?
¨[ISOGuide73:2002]
Coordinated activities to direct and control an organization with regard to risk.
指導和控制組織風險的協調活動
NOTE:Risk management typically includes risk assessment,risk treatment,risk acceptance and risk communication
注:風險管理活動一般包括風險評估?風險處理?風險接受和風險溝通?
¨[ISO/IECTR13335-1:2004]
The total processof identifying,controlling,and eliminating or minimizing uncertain events that may affect IT system resources.
識別?控制?消除或降低不期望事件影響IT系統資源的全過程?
風險分析
¨[ISOGuide73:2002]
System at ic use of information to identify sources and to estimate the risk.
系統地使用信息識別來源和估計風險?
¨[ISO/IECTR13335-1:2004]
The system at ic process of estimating the magnitude of risks.
評估風險大小的系統化的過程?
風險賦值
¨[ISOGuide73:2002]
Process of comparing the estimated risk against given risk criteria to determine the significance of the risk.
對照給定的風險準則和正在估計的風險,以確定風險嚴重程度的過程?
風險評估
¨[ISO/IEC17799:2000]
Assessment of threats to,impactson and vulnerabilities of information and information processing facilities and the likelihood of their occurrence.
對信息和信息處理設施的危害?影響和薄弱點及三者發生的可能性的評估?
¨[ISOGuide73:2002]
Over all process of risk analysis and riskuation.
風險分析和風險評價的整個過程?
剩余風險
¨[ISOGuide73:2002]
Risk remaining after risk treatment.
風險處理后殘留的風險?
¨[ISO/IECTR13335-1:2004]
The risk that remains after implementation of the IT security plan.
實施IT安全計劃后殘留的風險?
風險接受
¨[ISOGuide73:2002]
Decision to accept a risk.
接受一個風險的決定?
風險處理
¨[ISOGuide73:2002]
Process of selection and implementation of measures to modify risk.
選擇和實施措施以降低風險的處理過程?
風險降低
¨[ISOGuide73:2002]
Actions taken to lessen the probability,negative consequences,or both,as sociated with a risk.
采取措施降低風險發生的可能性以及與風險相關的負面影響?
風險轉移
¨[ISOGuide73:2002]
Sharing with an other party the burden of loss or benefit of gain,for a risk.
與另一方共同承擔風險,從而減輕利益或財產損失的負擔?
餐飲管理去哪申報ISO9001質量管理體系認證
ISO9001認證體系中對表格的控制(iso9001認證是啥意思)
淺談ISO9001認證步驟和流程
蘭州ISO27001認證的風險處置階段的工作內容
BRC認證需要準備什么？分幾個等級？
dcmm體系認證證書
ISO14001環境因素識別方法
天津iso9000認證哪家好？天津iso27001哪家好？
信息安全
¨[ISO/IEC17799:2000]
Preservation of confidentiality,integrity and availability of information.
保持信息的保密性?完整性和可用性?
¨[ISO/IEC17799:2005]
Preservation of confidentiality,integrity and availability of information;inaddition,other properties,such as authenticity,accountability,non-repudiation and reliability canals obeinvolved.
保持信息的保密性?完整性和可用性;另外,還包括真實性?可核查性?抗抵賴和可靠性?
保密性
¨[ISO/IEC13335-1:2004]
The property that information is not made available or disclosed to unauthorized individuals,entities,orprocesses.
使信息不泄露給未授權的個人?實體?過程或不使信息為其利用的特性?
完整性
¨[ISO/IEC13335-1:2004]
Integrity:the property of safe guarding the accuracy and completeness of assets.
保護資產準確性和完備性的特性?
可用性
¨[ISO/IEC13335-1:2004]
Availability:the property of being accessible and usable upondemand by an authorizedentity.
已授權實體一旦需要就可訪問和使用的特性?
資產
[ISO/IECTR13335-1:2004]
Asset:anything that has value to the organization.
任何對組織有價值的東西?
威脅
¨[ISO/IECTR13335-1:2004]
Threat:apotential cause of an unwanted incident that may result in harm to a system or organization.
可能對系統或組織造成損害的事件的潛在原因?
薄弱點
¨[ISO/IECTR13335-1:2004]
Vulnerability:a weakness of an asset or group of assets that can be exploited by one or more threats.
指資產或資產組的能被威脅利用的薄弱點?
風險
¨[ISOGuide73:2002]
Risk:combination of the probability of an event and its consequence.
指事件發生的可能性及后果的結合
風險管理
¨[ISO/IEC17799:2000]
Process of identifying,controlling and minimizing or eliminating security risks that may affect information systems,for an acceptable cost.
以可接受的費用識別?控制?降低或消除可能影響信息系統的安全風險的過程?
¨[ISOGuide73:2002]
Coordinated activities to direct and control an organization with regard to risk.
指導和控制組織風險的協調活動
NOTE:Risk management typically includes risk assessment,risk treatment,risk acceptance and risk communication
注:風險管理活動一般包括風險評估?風險處理?風險接受和風險溝通?
¨[ISO/IECTR13335-1:2004]
The total processof identifying,controlling,and eliminating or minimizing uncertain events that may affect IT system resources.
識別?控制?消除或降低不期望事件影響IT系統資源的全過程?
風險分析
¨[ISOGuide73:2002]
System at ic use of information to identify sources and to estimate the risk.
系統地使用信息識別來源和估計風險?
¨[ISO/IECTR13335-1:2004]
The system at ic process of estimating the magnitude of risks.
評估風險大小的系統化的過程?
風險賦值
¨[ISOGuide73:2002]
Process of comparing the estimated risk against given risk criteria to determine the significance of the risk.
對照給定的風險準則和正在估計的風險,以確定風險嚴重程度的過程?
風險評估
¨[ISO/IEC17799:2000]
Assessment of threats to,impactson and vulnerabilities of information and information processing facilities and the likelihood of their occurrence.
對信息和信息處理設施的危害?影響和薄弱點及三者發生的可能性的評估?
¨[ISOGuide73:2002]
Over all process of risk analysis and riskuation.
風險分析和風險評價的整個過程?
剩余風險
¨[ISOGuide73:2002]
Risk remaining after risk treatment.
風險處理后殘留的風險?
¨[ISO/IECTR13335-1:2004]
The risk that remains after implementation of the IT security plan.
實施IT安全計劃后殘留的風險?
風險接受
¨[ISOGuide73:2002]
Decision to accept a risk.
接受一個風險的決定?
風險處理
¨[ISOGuide73:2002]
Process of selection and implementation of measures to modify risk.
選擇和實施措施以降低風險的處理過程?
風險降低
¨[ISOGuide73:2002]
Actions taken to lessen the probability,negative consequences,or both,as sociated with a risk.
采取措施降低風險發生的可能性以及與風險相關的負面影響?
風險轉移
¨[ISOGuide73:2002]
Sharing with an other party the burden of loss or benefit of gain,for a risk.
與另一方共同承擔風險,從而減輕利益或財產損失的負擔?
餐飲管理去哪申報ISO9001質量管理體系認證
ISO9001認證體系中對表格的控制(iso9001認證是啥意思)
淺談ISO9001認證步驟和流程
蘭州ISO27001認證的風險處置階段的工作內容
BRC認證需要準備什么？分幾個等級？
dcmm體系認證證書
ISO14001環境因素識別方法
天津iso9000認證哪家好？天津iso27001哪家好？