47上一句的規(guī)定是specify，這里的規(guī)定是set out，有陳述、羅列的意思。這兩個(gè)詞沿用了GB丌22080-'2008／ISO/IEC27001: 2005中的翻譯。

48英文原文中加了下劃線，此處保持統(tǒng)一。

49這段客套話，表述略有區(qū)別，ISO/IEC 27001：2013：The following documents, in whole or in part, are normatively refer -

enced in this document and are indispensable for its application. For dated references, only the edition cited applies. For undated references，the latest edition of the referenced document (including any amendments) applies.在ISO/IEC 27001：2005描述如下；The following referenced documents are indispensable for the application of this document. For dated references,only the edition cited applies. For undated references, the latest edition of the referenced document (including any amendments) applies. 國(guó)家標(biāo)準(zhǔn)的描述都是一致的，顯然與英文不盡相同。在這個(gè)形式問(wèn)題上，國(guó)家標(biāo)準(zhǔn)比國(guó)際標(biāo)準(zhǔn)更規(guī)范。

50這個(gè)是沒(méi)有標(biāo)注年號(hào)的標(biāo)準(zhǔn)。目前這個(gè)標(biāo)準(zhǔn)有中文版本：GB/T 29246-2012／ISO/IEC 27000: 2009信息技術(shù)安全技術(shù)信息安全管理體系概述和詞匯。

研可以購(gòu)買該標(biāo)準(zhǔn)的中文版.或者參考：謝宗曉編著，《信息安全管理體系實(shí)施指南》，中國(guó)標(biāo)準(zhǔn)出版社。