本文件规定了安全管理系统的要求，包括与供应链相关的方面。 本文件适用于打算建立、实施、维护和改进安全管理体系的所有类型和规模的组织（如商业企业、政府或其他公共机构和非营利组织）。它提供了一种整体和通用的方法，并且不是特定于行业或部门的。 本文件可在组织的整个生命周期内使用，并可应用于所有级别的任何内部或外部活动。

This document specifies requirements for a security management system, including aspects relevant to the supply chain. This document is applicable to all types and sizes of organizations (e.g. commercial enterprises, government or other public agencies and non-profit organizations) which intend to establish, implement, maintain and improve a security management system. It provides a holistic and common approach and is not industry or sector specific. This document can be used throughout the life of the organization and can be applied to any activity, internal or external, at all levels.