ISO27001相關(guān)術(shù)語
信息安全
Preservation of confidentiality,integrity and availability of information.
保持信息的保密性?完整性和可用性?
¨[ISO/IEC17799:2005]
Preservation of confidentiality,integrity and availability of information;inaddition,other properties,such as authenticity,accountability,non-repudiation and reliability canals obeinvolved.
保持信息的保密性?完整性和可用性;另外,還包括真實性?可核查性?抗抵賴和可靠性?
保密性
¨[ISO/IEC13335-1:2004]
The property that information is not made available or disclosed to unauthorized individuals,entities,orprocesses.
使信息不泄露給未授權(quán)的個人?實體?過程或不使信息為其利用的特性?
完整性
¨[ISO/IEC13335-1:2004]
Integrity:the property of safe guarding the accuracy and completeness of assets.
保護資產(chǎn)準確性和完備性的特性?
可用性
¨[ISO/IEC13335-1:2004]
Availability:the property of being accessible and usable upondemand by an authorizedentity.
已授權(quán)實體一旦需要就可訪問和使用的特性?
資產(chǎn)
[ISO/IECTR13335-1:2004]
Asset:anything that has value to the organization.
任何對組織有價值的東西?
威脅
¨[ISO/IECTR13335-1:2004]
Threat:apotential cause of an unwanted incident that may result in harm to a system or organization.
可能對系統(tǒng)或組織造成損害的事件的潛在原因?
薄弱點
¨[ISO/IECTR13335-1:2004]
Vulnerability:a weakness of an asset or group of assets that can be exploited by one or more threats.
指資產(chǎn)或資產(chǎn)組的能被威脅利用的薄弱點?
風險
¨[ISOGuide73:2002]
Risk:combination of the probability of an event and its consequence.
指事件發(fā)生的可能性及后果的結(jié)合
風險管理
¨[ISO/IEC17799:2000]
Process of identifying,controlling and minimizing or eliminating security risks that may affect information systems,for an acceptable cost.
以可接受的費用識別?控制?降低或消除可能影響信息系統(tǒng)的安全風險的過程?
¨[ISOGuide73:2002]
Coordinated activities to direct and control an organization with regard to risk.
指導和控制組織風險的協(xié)調(diào)活動
NOTE:Risk management typically includes risk assessment,risk treatment,risk acceptance and risk communication
注:風險管理活動一般包括風險評估?風險處理?風險接受和風險溝通?
¨[ISO/IECTR13335-1:2004]
The total processof identifying,controlling,and eliminating or minimizing uncertain events that may affect IT system resources.
識別?控制?消除或降低不期望事件影響IT系統(tǒng)資源的全過程?
風險分析
¨[ISOGuide73:2002]
System at ic use of information to identify sources and to estimate the risk.
系統(tǒng)地使用信息識別來源和估計風險?
¨[ISO/IECTR13335-1:2004]
The system at ic process of estimating the magnitude of risks.
評估風險大小的系統(tǒng)化的過程?
風險賦值
¨[ISOGuide73:2002]
Process of comparing the estimated risk against given risk criteria to determine the significance of the risk.
對照給定的風險準則和正在估計的風險,以確定風險嚴重程度的過程?
風險評估
¨[ISO/IEC17799:2000]
Assessment of threats to,impactson and vulnerabilities of information and information processing facilities and the likelihood of their occurrence.
對信息和信息處理設(shè)施的危害?影響和薄弱點及三者發(fā)生的可能性的評估?
¨[ISOGuide73:2002]
Over all process of risk analysis and riskuation.
風險分析和風險評價的整個過程?
剩余風險
¨[ISOGuide73:2002]
Risk remaining after risk treatment.
風險處理后殘留的風險?
¨[ISO/IECTR13335-1:2004]
The risk that remains after implementation of the IT security plan.
實施IT安全計劃后殘留的風險?
風險接受
¨[ISOGuide73:2002]
Decision to accept a risk.
接受一個風險的決定?
風險處理
¨[ISOGuide73:2002]
Process of selection and implementation of measures to modify risk.
選擇和實施措施以降低風險的處理過程?
風險降低
¨[ISOGuide73:2002]
Actions taken to lessen the probability,negative consequences,or both,as sociated with a risk.
采取措施降低風險發(fā)生的可能性以及與風險相關(guān)的負面影響?
風險轉(zhuǎn)移
¨[ISOGuide73:2002]
Sharing with an other party the burden of loss or benefit of gain,for a risk.
與另一方共同承擔風險,從而減輕利益或財產(chǎn)損失的負擔?
中企檢測認證網(wǎng)提供iso體系認證機構(gòu)查詢，檢驗檢測、認證認可、資質(zhì)資格、計量校準、知識產(chǎn)權(quán)貫標一站式行業(yè)企業(yè)服務(wù)平臺。中企檢測認證網(wǎng)為檢測行業(yè)相關(guān)檢驗、檢測、認證、計量、校準機構(gòu)，儀器設(shè)備、耗材、配件、試劑、標準品供應(yīng)商，法規(guī)咨詢、標準服務(wù)、實驗室軟件提供商提供包括品牌宣傳、產(chǎn)品展示、技術(shù)交流、新品推薦等全方位推廣服務(wù)。這個問題就給大家解答到這里了，如還需要了解更多專業(yè)性問題可以撥打中企檢測認證網(wǎng)在線客服13550333441。為您提供全面檢測、認證、商標、專利、知識產(chǎn)權(quán)、版權(quán)法律法規(guī)知識資訊，包括商標注冊、食品檢測、第三方檢測機構(gòu)、網(wǎng)絡(luò)信息技術(shù)檢測、環(huán)境檢測、管理體系認證、服務(wù)體系認證、產(chǎn)品認證、版權(quán)登記、專利申請、知識產(chǎn)權(quán)、檢測法、認證標準等信息，中企檢測認證網(wǎng)為檢測認證商標專利從業(yè)者提供多種檢測、認證、知識產(chǎn)權(quán)、版權(quán)、商標、專利的轉(zhuǎn)讓代理查詢法律法規(guī)，咨詢輔導等知識。
本文內(nèi)容整合網(wǎng)站：百度百科、搜狗百科、360百科、知乎、市場監(jiān)督總局 、國家認證認可監(jiān)督管理委員會、質(zhì)量認證中心
免責聲明：本文部分內(nèi)容根據(jù)網(wǎng)絡(luò)信息整理，文章版權(quán)歸原作者所有。向原作者致敬！發(fā)布旨在積善利他，如涉及作品內(nèi)容、版權(quán)和其它問題，請跟我們聯(lián)系刪除并致歉！
