Information Security Management System

     GB/T 22080-2025

     ISO27001：2022

      Introduction

     ISO/IEC 27001:2022 is a management system standard in the field of information security. It adopts the risk management approach to effectively protect information resources and ensure the healthy, orderly and sustainable development of the informationization process.It is collectively referred to as the information dual certification along with the Information Technology Service Management System.

      ISO/IEC 27001:2022 Information Security Management System not only enables timely and effective measures to be taken after an information security incident occurs, preventing huge losses caused by the incident, but more importantly, the ISO/IEC 27001:2022 certified information security management system can prevent and avoid the occurrence of most information security incidents.

      Certification process

      The process for obtaining certifications related to the management system is generally consistent. When an enterprise applies, there is no need for special record-keeping.The process typically includes: submitting the application, signing the contract and paying the advance payment;preliminary review (first-stage audit/document review, second-stage audit/field audit);certification decision;settling the fees, registering and issuing the certificate;annual supervision audit (the number of times may vary);re-certification after the expiration of the certificate, etc.

    认证依据：GBT22080-2025IS0IEC 270012022《网络安全技术 信息安全管理体系 要求》.pdf

    认证规则：CNCA-ISMS-01 2026 信息安全管理体系认证规则.pdf

    For further information, please call our company's marketing department at: 010-84724911