ISO/IEC 27001:2022
Requirements for establishing and improving a risk-based information security management system.
Voluntary framework/standard unless imposed by law, contract or sector rules.
ISO/IEC · 2026-10-23官方来源↗International · Mevzuat
ISO/IEC 27002:2022
Guidance for selecting and implementing information security controls; not a standalone certification claim.
Voluntary framework/standard unless imposed by law, contract or sector rules.
ISO/IEC · 2026-10-23官方来源↗NIST Cybersecurity Framework 2.0
Organize cyber risk outcomes around Govern, Identify, Protect, Detect, Respond and Recover.
Voluntary framework/standard unless imposed by law, contract or sector rules.
NIST · 2026-10-23官方来源↗CIS Critical Security Controls
Prioritized safeguards for practical cyber hygiene and risk reduction.
Voluntary framework/standard unless imposed by law, contract or sector rules.
Center for Internet Security · 2026-10-23官方来源↗监管范围根据组织的活动进行评估。 此列表不是法律建议或官方审计机构的声明。