This document describes the basic concepts of information security risk assessment, relationship between risk factors, principles of risk analysis, implementation process and assessment method of risk assessment, as well as the implementation points and work forms of risk assessment at different stages of information system lifecycle. This document applies to all types of organizations conducting information security risk assessments.
Basic Data
Standard ID
GB/T 20984-2022 (GB/T20984-2022)
Description (Translated English)
Information security technology - Risk assessment method for information security
Sector / Industry
National Standard (Recommended)
Classification of Chinese Standard
L80
Word Count Estimation
30,357
Issuing agency(ies)
State Administration for Market Regulation, China National Standardization Administration
