信息安全事件管理国家标准和国际标准解读

Interpretation for the National Standard and International Standard of Information Security Incident Management

概述了信息安全事件管理,阐述了信息安全事件管理标准中的两个关键概念(即信息安全事态和信息安全事件),对信息安全事件管理的国家标准GB/Z 20985-2007和国际标准ISO/IEC 27035进行了解读,包括国家标准与国际标准的关系,国际标准的沿革,当前国际标准的主要内容及其修订的最新动态。

This paper gives an overview of information security incident management, explains two key concepts of information security incident management（i.e. information security event and information security incident）, and interpretates the National Standard GB/Z 20985-2007 and the International Standard ISO/IEC 27035 of information security incident management, including their relationship, evolution of the International Standard, the main content of the current International Standard and the newest status of its revision.