GB/T 28450-2020 Information technology—Security techniques—Guidelines for information security management systems auditing

Scope: On the basis of GB/T 19011-2013, this standard provides guidelines for information security management system (hereinafter referred to as ISMS) audit program management and audit implementation, and provides evaluation guidelines for ISMS auditor capabilities. This International Standard is applicable to all organizations that need to understand or implement internal or external audits of an ISMS, or that need to manage an ISMS audit programme.

GB/T 19011-2013 Guidelines for auditing management systems
GB/T 22080-2016 Information technology.Security techniques.Information security management systems.Requirements
GB/T 29246-2017 Information technology—Security techniques—Information security management systems—Overview and vocabulary
ISO/IEC 27000 Information technology — Security techniques — Information security management systems — Overview and vocabulary
ISO/IEC 27001:2013 Information technology.Security techniques.Information security management systems.Requirements

2020 GB/T 28450-2020 Information technology—Security techniques—Guidelines for information security management systems auditing
2012 GB/T 28450-2012 Information security technology.Guidelines for information security management system auditing

GB/T 28450-2020Information technology—Security techniques—Guidelines for information security management systems auditing