ISO/IEC 27035-1:20 23本文件是ISO/IEC 27035系列的基础。它介绍了信息安全事件管理的基本概念、原则和流程以及关键活动，为准备、检测、报告、评估和响应事件以及应用经验教训提供了一种结构化的方法。 本文件中给出的关于信息安全事件管理流程及其关键活动的指导是通用的，旨在适用于所有组织，无论其类型、规模或性质如何。组织可以根据其与信息安全风险状况相关的业务类型、规模和性质来调整指南。本文件也适用于提供信息安全事件管理服务的外部组织。

ISO/IEC 27035-1:2023 This document is the foundation of the ISO/IEC 27035 series. It presents basic concepts, principles and process with key activities of information security incident management, which provide a structured approach to preparing for, detecting, reporting, assessing, and responding to incidents, and applying lessons learned.
The guidance on the information security incident management process and its key activities given in this document are generic and intended to be applicable to all organizations, regardless of type, size or nature. Organizations can adjust the guidance according to their type, size and nature of business in relation to the information security risk situation. This document is also applicable to external organizations providing information security incident management services.