本文件给出了应用原则的指南，以及对组织系统进行复杂性评估以提高安全性和弹性的过程。复杂性评估过程允许组织识别其系统的潜在隐藏漏洞，并提供复杂性导致的风险的早期指示。 本文件是通用的，适用于所有规模和类型的组织系统，如关键资产、战略网络、供应链、工业工厂、社区基础设施、银行和商业公司。

This document gives guidelines for the application of principles and a process for a complexity assessment of an organization's systems to improve security and resilience. A complexity assessment process allows an organization to identify potential hidden vulnerabilities of its system and to provide an early indication of risk resulting from complexity. This document is generic and applicable to all sizes and types of organization systems, such as critical assets, strategic networks, supply chains, industrial plants, community infrastructures, banks and business companies.