This standard proposes the basic concepts, element relationships, analysis principles, implementation processes, assessment methods of risk assessment, as well as the implementation key-points and working forms of risk assessment at different stages of the life cycle of information system. This standard applies to normalizing the risk assessment work carried out by the organization.
Basic Data
Standard ID
GB/T 20984-2007 (GB/T20984-2007)
Description (Translated English)
Information security technology -- Risk assessment specification for information security
General Administration of Quality Supervision, Inspection and Quarantine of the People's Republic of China, Standardization Administration of the People's Republic of China
Summary
This standard specifies the basic concepts of risk assessment, elements of relationship analysis principles, implementation process and assessment methods and risk assessment in the information system life cycle at different stages of the implementation of the key points and forms of work. This standard applies to regulate the organization to carry out a risk assessment.
