ISO/IEC 27032:2012 信息技术 安全技术 网络安全指南

标准编号：ISO/IEC 27032:2012

中文名称：信息技术 安全技术 网络安全指南

英文名称：Information technology — Security techniques — Guidelines for cybersecurity

发布日期：2012-07

标准范围

ISO/IEC 27032:2012为改善网络安全状况提供了指导，指出了该活动的独特方面及其对其他安全领域的依赖性，特别是:信息安全、网络安全、互联网安全和关键信息基础设施保护（CIIP）。它涵盖了网络空间利益相关者的基本安全实践。该国际标准提供了:网络安全概述、网络安全与其他类型安全之间关系的解释、利益相关者的定义及其在网络安全中的角色描述、解决常见网络安全问题的指南、使利益相关者能够合作解决网络安全问题的框架。

ISO/IEC 27032:2012 provides guidance for improving the state of Cybersecurity, drawing out the unique aspects of that activity and its dependencies on other security domains, in particular:

• information security,


• network security,


• internet security, and


• critical information infrastructure protection (CIIP).

It covers the baseline security practices for stakeholders in the Cyberspace. This International Standard provides:

• an overview of Cybersecurity,


• an explanation of the relationship between Cybersecurity and other types of security,


• a definition of stakeholders and a description of their roles in Cybersecurity,


• guidance for addressing common Cybersecurity issues, and


• a framework to enable stakeholders to collaborate on resolving Cybersecurity issues.

标准预览图