| PDF Pages<\/th>\n | PDF Title<\/th>\n<\/tr>\n | ||||||
|---|---|---|---|---|---|---|---|
| 2<\/td>\n | undefined <\/td>\n<\/tr>\n | ||||||
| 7<\/td>\n | Foreword <\/td>\n<\/tr>\n | ||||||
| 8<\/td>\n | Introduction <\/td>\n<\/tr>\n | ||||||
| 11<\/td>\n | 1 Scope 2 Normative references 3 Terms and definitions <\/td>\n<\/tr>\n | ||||||
| 14<\/td>\n | 4 Context of the organization 4.1 Understanding the organization and its context 4.2 Understanding the needs and expectations of interested parties 4.2.1 General 4.2.2 Legal, regulatory and other requirements <\/td>\n<\/tr>\n | ||||||
| 15<\/td>\n | 4.2.3 Principles <\/td>\n<\/tr>\n | ||||||
| 16<\/td>\n | 4.3 Determining the scope of the security management system 4.4 Security management system <\/td>\n<\/tr>\n | ||||||
| 17<\/td>\n | 5 Leadership 5.1 Leadership and commitment 5.2 Security policy 5.2.1 Establishing the security policy <\/td>\n<\/tr>\n | ||||||
| 18<\/td>\n | 5.2.2 Security policy requirements 5.3 Roles, responsibilities and authorities 6 Planning 6.1 Actions to address risks and opportunities 6.1.1 General <\/td>\n<\/tr>\n | ||||||
| 19<\/td>\n | 6.1.2 Determining security-related risks and identifying opportunities 6.1.3 Addressing security-related risks and exploiting opportunities 6.2 Security objectives and planning to achieve them 6.2.1 Establishing security objectives <\/td>\n<\/tr>\n | ||||||
| 20<\/td>\n | 6.2.2 Determining security objectives 6.3 Planning of changes 7 Support 7.1 Resources 7.2 Competence <\/td>\n<\/tr>\n | ||||||
| 21<\/td>\n | 7.3 Awareness 7.4 Communication 7.5 Documented information 7.5.1 General 7.5.2 Creating and updating documented information <\/td>\n<\/tr>\n | ||||||
| 22<\/td>\n | 7.5.3 Control of documented information 8 Operation 8.1 Operational planning and control 8.2 Identification of processes and activities <\/td>\n<\/tr>\n | ||||||
| 23<\/td>\n | 8.3 Risk assessment and treatment 8.4 Controls <\/td>\n<\/tr>\n | ||||||
| 24<\/td>\n | 8.5 Security strategies, procedures, processes and treatments 8.5.1 Identification and selection of strategies and treatments 8.5.2 Resource requirements 8.5.3 Implementation of treatments 8.6 Security plans 8.6.1 General 8.6.2 Response structure <\/td>\n<\/tr>\n | ||||||
| 25<\/td>\n | 8.6.3 Warning and communication 8.6.4 Content of the security plans <\/td>\n<\/tr>\n | ||||||
| 26<\/td>\n | 8.6.5 Recovery 9 Performance evaluation 9.1 Monitoring, measurement, analysis and evaluation <\/td>\n<\/tr>\n | ||||||
| 27<\/td>\n | 9.2 Internal audit 9.2.1 General 9.2.2 Internal audit programme 9.3 Management review 9.3.1 General <\/td>\n<\/tr>\n | ||||||
| 28<\/td>\n | 9.3.2 Management review inputs 9.3.3 Management review results 10 Improvement 10.1 Continual improvement <\/td>\n<\/tr>\n | ||||||
| 29<\/td>\n | 10.2 Nonconformity and corrective action <\/td>\n<\/tr>\n | ||||||
| 30<\/td>\n | Bibliography <\/td>\n<\/tr>\n<\/table>\n","protected":false},"excerpt":{"rendered":" Security and resilience. Security management systems. Requirements<\/b><\/p>\n |