ISO27001相關術語
信息安全
Preservation of confidentiality,integrity and availability of information.
保持信息的保密性?完整性和可用性?
¨[ISO/IEC17799:2005]
Preservation of confidentiality,integrity and availability of information;inaddition,other properties,such as authenticity,accountability,non-repudiation and reliability canals obeinvolved.
保持信息的保密性?完整性和可用性;另外,還包括真實性?可核查性?抗抵賴和可靠性?
保密性
¨[ISO/IEC13335-1:2004]
The property that information is not made available or disclosed to unauthorized individuals,entities,orprocesses.
使信息不泄露給未授權的個人?實體?過程或不使信息為其利用的特性?
完整性
¨[ISO/IEC13335-1:2004]
Integrity:the property of safe guarding the accuracy and completeness of assets.
保護資產準確性和完備性的特性?
可用性
¨[ISO/IEC13335-1:2004]
Availability:the property of being accessible and usable upondemand by an authorizedentity.
已授權實體一旦需要就可訪問和使用的特性?
資產
[ISO/IECTR13335-1:2004]
Asset:anything that has value to the organization.
任何對組織有價值的東西?
威脅
¨[ISO/IECTR13335-1:2004]
Threat:apotential cause of an unwanted incident that may result in harm to a system or organization.
可能對系統(tǒng)或組織造成損害的事件的潛在原因?
薄弱點
¨[ISO/IECTR13335-1:2004]
Vulnerability:a weakness of an asset or group of assets that can be exploited by one or more threats.
指資產或資產組的能被威脅利用的薄弱點?
風險
¨[ISOGuide73:2002]
Risk:combination of the probability of an event and its consequence.
指事件發(fā)生的可能性及后果的結合
風險管理
¨[ISO/IEC17799:2000]
Process of identifying,controlling and minimizing or eliminating security risks that may affect information systems,for an acceptable cost.
以可接受的費用識別?控制?降低或消除可能影響信息系統(tǒng)的安全風險的過程?
¨[ISOGuide73:2002]
Coordinated activities to direct and control an organization with regard to risk.
指導和控制組織風險的協(xié)調活動
NOTE:Risk management typically includes risk assessment,risk treatment,risk acceptance and risk communication
注:風險管理活動一般包括風險評估?風險處理?風險接受和風險溝通?
¨[ISO/IECTR13335-1:2004]
The total processof identifying,controlling,and eliminating or minimizing uncertain events that may affect IT system resources.
識別?控制?消除或降低不期望事件影響IT系統(tǒng)資源的全過程?
風險分析
¨[ISOGuide73:2002]
System at ic use of information to identify sources and to estimate the risk.
系統(tǒng)地使用信息識別來源和估計風險?
¨[ISO/IECTR13335-1:2004]
The system at ic process of estimating the magnitude of risks.
評估風險大小的系統(tǒng)化的過程?
風險賦值
¨[ISOGuide73:2002]
Process of comparing the estimated risk against given risk criteria to determine the significance of the risk.
對照給定的風險準則和正在估計的風險,以確定風險嚴重程度的過程?
風險評估
¨[ISO/IEC17799:2000]
Assessment of threats to,impactson and vulnerabilities of information and information processing facilities and the likelihood of their occurrence.
對信息和信息處理設施的危害?影響和薄弱點及三者發(fā)生的可能性的評估?
¨[ISOGuide73:2002]
Over all process of risk analysis and riskuation.
風險分析和風險評價的整個過程?
剩余風險
¨[ISOGuide73:2002]
Risk remaining after risk treatment.
風險處理后殘留的風險?
¨[ISO/IECTR13335-1:2004]
The risk that remains after implementation of the IT security plan.
實施IT安全計劃后殘留的風險?
風險接受
¨[ISOGuide73:2002]
Decision to accept a risk.
接受一個風險的決定?
風險處理
¨[ISOGuide73:2002]
Process of selection and implementation of measures to modify risk.
選擇和實施措施以降低風險的處理過程?
風險降低
¨[ISOGuide73:2002]
Actions taken to lessen the probability,negative consequences,or both,as sociated with a risk.
采取措施降低風險發(fā)生的可能性以及與風險相關的負面影響?
風險轉移
¨[ISOGuide73:2002]
Sharing with an other party the burden of loss or benefit of gain,for a risk.
與另一方共同承擔風險,從而減輕利益或財產損失的負擔?
中企檢測認證網提供iso體系認證機構查詢，檢驗檢測、認證認可、資質資格、計量校準、知識產權貫標一站式行業(yè)企業(yè)服務平臺。中企檢測認證網為檢測行業(yè)相關檢驗、檢測、認證、計量、校準機構，儀器設備、耗材、配件、試劑、標準品供應商，法規(guī)咨詢、標準服務、實驗室軟件提供商提供包括品牌宣傳、產品展示、技術交流、新品推薦等全方位推廣服務。這個問題就給大家解答到這里了，如還需要了解更多專業(yè)性問題可以撥打中企檢測認證網在線客服13550333441。為您提供全面檢測、認證、商標、專利、知識產權、版權法律法規(guī)知識資訊，包括商標注冊、食品檢測、第三方檢測機構、網絡信息技術檢測、環(huán)境檢測、管理體系認證、服務體系認證、產品認證、版權登記、專利申請、知識產權、檢測法、認證標準等信息，中企檢測認證網為檢測認證商標專利從業(yè)者提供多種檢測、認證、知識產權、版權、商標、專利的轉讓代理查詢法律法規(guī)，咨詢輔導等知識。
本文內容整合網站：百度百科、搜狗百科、360百科、知乎、市場監(jiān)督總局 、國家認證認可監(jiān)督管理委員會、質量認證中心
免責聲明：本文部分內容根據網絡信息整理，文章版權歸原作者所有。向原作者致敬！發(fā)布旨在積善利他，如涉及作品內容、版權和其它問題，請跟我們聯(lián)系刪除并致歉！
