參考文獻

[1] GB/T 22080—2008　信息技術　安全技術　信息安全管理體系　要求

[2] GB/T 22081—2008　信息技術　安全技術　信息安全管理實用規則

[3] GB/T 31722—2015　信息技術　安全技術　信息安全風險管理

[4] ISO/IEC 38500:2008, Corporate Governance of Information technology –** A standard for corporate governance of information technology

[5] ITU-T Recommendation X.1051 (2008) | ISO/IEC 27011:2008, Information technology –** Security techniques – Information security management guidelines for telecommunications organisations based on ISO/IEC 27002

[6] ITGI, Information Security Governance framework:2009

ISF, Standard of Good Practice for Information Security:2011