GB/T 22081-2008 in English

《GB/T 22081-2008信息技术 安全技术 信息安全管理实用规则》由TC260（全国网络安全标准化技术委员会）归口，主管部门为国家标准化管理委员会。
本标准给出了一个组织启动、实施、保持和改进信息安全管理的指南和一般原则。本标准列出的目标为通常所接受的信息安全管理的目的提供了一般性指导。
本标准的控制目标和控制措施的实施旨在满足风险评估所识别的要求。本标准可作为建立组织的安全准则和有效安全管理实践的实用指南，并有助于在组织间的活动中构建互信。

Scope

This International Standard gives guidance and general principles for an organization to initiate, implement, maintain and improve information security management. The objectives listed in this International Standard provide general guidance for commonly accepted objectives of information security management. The control objectives of this International Standard and the implementation of control measures are designed to meet the requirements identified in the risk assessment. This International Standard serves as a practical guide for establishing an organization's security principles and effective security management practices, and helps build trust in inter-organizational activities.