[STD] BS ISO-IEC 27006-2007 - Information technology ?? Security techniques -- Requirements for bodies providing audit and certification of information security management systems.pdf

文档介绍：BRITISH STANDARD BS ISO/IEC
27006:2007
Information
technology — Security
techniques —
Requirements for
bodies providing audit
and certification of
information security
management systems
ICS
 

 
BS ISO/IEC 27006:2007
National foreword
This British Standard was published by BSI. It is the UK implementation of
ISO/IEC 27006:2007.
The UK participation in its preparation was entrusted to mittee
IST/33, IT — Security techniques.
A list anizations represented on IST/33 can be obtained on request to its
secretary.
This publication does not purport to include all the necessary provisions of a
contract. Users are responsible for its correct application.
Compliance with a British Standard cannot confer immunity from
legal obligations.
This British Standard was Amendments issued since publication
published under the authority
of the Standards Policy and
mittee Amd. No. ments
on 30 March 2007
© BSI 2007
ISBN 978 0 580 50311 5
BS ISO/IEC 27006:2007
INTERNATIONAL ISO/IEC
STANDARD 27006
First edition
2007-03-01

Information technology — Security
techniques — Requirements for bodies
providing audit and certification of
information security management
systems
Technologies de l'information — Techniques de sécurité — Exigences
pour anismes procédant à l'audit et à la certification des
systèmes de management de la sécurité de l'information



Reference number
ISO/IEC 27006:2007(E)
ii
BS ISO/IEC 27006:2007
Contents
Foreword............................................................................................................................................................ iv
Introduction ........................................................................................................................................................ v
1 Scope ..............................................................