安全性和弹性 保护性安全 制定组织安全计划的指南

[中文适用范围]： 本文档提供了有关制定和维护安全计划的指导。 安全计划描述了组织如何建立有效的安全规划以及如何将安全集成到组织风险管理实践中。 本文件适用于所有希望以一致的方式制定有效安全计划的组织，无论其类型、规模和性质如何，无论是私营、公共还是非营利部门。 本文档适用于任何打算实施旨在保护其资产免受恶意行为并降低相关风险的措施的组织。 本文件没有提供确定是否需要实施或加强针对恶意行为的预防和保护措施的具体标准。 它不适用于私营保安公司提供的服务和业务。 [外文原描述]： This document gives guidance on developing and maintaining security plans. The security plan describes how an organization establishes effective security planning and how it can integrate security within organizational risk management practices. This document is applicable to all organizations regardless of type, size and nature, whether in the private, public or not-for-profit sectors, that wish to develop effective security plans in a consistent manner. This document is applicable to any organization intending to implement measures designed to protect their assets against malicious acts and mitigate their associated risks. This document does not provide specific criteria for identifying the need to implement or enhance prevention and protection measures against malicious acts. It does not apply to services and operations delivered by private security companies.