GB/T 22081-2016 in English

《GB/T 22081-2016信息技术 安全技术 信息安全控制实践指南》由TC260（全国网络安全标准化技术委员会）归口，主管部门为国家标准化管理委员会。

Scope

This standard provides guidance for information security standards and information security management practices for organizations, including the selection, implementation and management of controls that take into account the information security risk environment of the organization. This standard is designed to help organizations: a) select controls, that is, select controls based on GB/T 22080-2009 in the process of implementing an information security management system; b) implement common and acceptable information security controls; c) develop the organization's own information security management guidelines.