Valid

GB/T 33132-2016Information security technology—Guide of implementation for information security risk treatment (English PDF)

信息安全技术信息安全风险处理实施指南

Preview PDF

This is a limited preview

Buy now to download the full PDF (20 pages)

Need quotation for your management?

Get a formal quotation for GB/T 33132-2016 in 30 minutes.

Issued by

SAMR; SAC

Level / Type

National · Recommended

Issue date

October 13, 2016

Implementation date

May 1, 2017

Scope

GB/T 33132-2016 is the English-translated version of 信息安全技术信息安全风险处理实施指南.

GB/T 33132-2016 is the Chinese standard "Information security technology—Guide of implementation for information security risk treatment".

Its scope clause reads: This standard gives the basic concept of information security risk management, processing principles, processing methods, processing processes and the effect of the end of the treatment Fruit evaluation and other management processes and methods, and the process of the role and responsibilities were defined.

This standard applies to guide the use of information systems operating units and information security services to implement information security risk management activities. Its clauses include normative reference documents; terms and definitions.

Found what you need?

Document preview — GB/T 33132-2016

National Standard of the People's Republic of China

ICS: 35.040
Classification: L 80

Issued by: State Administration for Market Regulation; Standardization Administration of the PRC

Preface
Introduction
1 Scope
2 normative reference document
3 Terms and definitions
4 Overview of risk management implementation
4.1 Basic principles of risk management
4.2 How to deal with risk
4.3 Roles and Responsibilities of Risk Handling
4.4 the basic process of risk handling
5 Risk Handling Preparation
5.1 Develop risk management plan
5.2 Obtain management approval
6 Risk Management Implementation
6.1 Risk management plan development
6.2 Implementation of risk management plan
7.1 Overview
7.2 Evaluation Principle
7.3 Evaluation methods
7.4 Evaluation program
7.5 Evaluation Implementation
7.6 Continuous improvement
Appendix A (Informative Appendix) Examples of Risk Handling Practices

1 Scope

This standard gives the basic concept of information security risk management, processing principles, processing methods, processing processes and the effect of the end of the treatment

Fruit evaluation and other management processes and methods, and the process of the role and responsibilities were defined.

This standard applies to guide the use of information systems operating units and information security services to implement information security risk management activities.

2 normative reference documents

The following documents are indispensable for the application of this document. For dated references, only the dated edition applies to this article

Pieces. For undated references, the latest edition (including all modifications) applies to this document.

Information security technology - Information security risk assessment specification GB/T 20984-2007

Information security technology - Information security risk management guide GB /Z24364-2009

3 terms and definitions

GB/T 20984-2007, GB /Z24364-2009 and the following terms and definitions apply to this document.

3.1 Risk management

Select and implement measures to change the risk of the process.

[ISO /IEC Guide73..2002].

Note. In this standard, the term "control measures" is used as a synonym for "measures".

3.2 Risk avoidance riskelimination

Not involved in the decision of the risk situation or evacuation of the risk situation.

[ISO /IEC Guide73..2002].

3.3 Risk transfer

And the loss or benefit of the other party to the risk.

[ISO /IEC Guide73..2002].

Note. In the context of information security risks, only negative results (losses) are taken into account for risk transfer.

3.4 Risk reduction

Actions taken to reduce the likelihood of risk and/or negative results.

[ISO /IEC Guide73..2002].

3.5 To accept risk risk

Acceptance of loss or benefit from a particular risk.

......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 20 pages — is available in the English PDF.

Referenced standards

Cited by

Similar standards

GB/T 18805-2026|GB/T 32915-2026|GB/T 42382.2-2026|GB/T 42382.3-2026|GB/T 47277-2026|GB/T 47312-2026

How to Download GB/T 33132-2016

1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.