of 187
8/3/2019 Iso 27002_2005
1/187
,31472,.O308:3,.9;4;9,5,7,0F94,.4393:/,/030207.,/4/0.:,6:07
47,3,.O3,80:7,20394/0/.,31472,.O3/04888902,86:0,574.08,308547
9,394:34-09;4/0572073;05,7,,47,3,.O3
!,7,,,/0.:,/,089O3/0,80:7/,//0,31472,.O30830.08,7425,39,7:388902,6:0
,-47/0089,9,70,/0:3,1472,209O/.,/4.:2039,/,-,8,/,03:3484-09;48.,748/0
80:7/,/:3,0;,:,.O3/04870848,486:0089E84209/,,31472,.O3/0,
47,3,.O3
$08:3.43:394/0089E3/,708/08,774,/484031,80/0/08,7744 547$39073,943,7,3,943 147 $9,3/,7/,943039073,943,0.97490.3., 4228843
6:0574547.43,3:32,7.4/0089O3/0,80:7/,//0,31472,.O3:9,-0547.:,6:07
954/047,3,.O35-.,457;,/,7,3/04506:0N,
30890,5,79,/480708:203,8/8939,83472,86:0.4254303,8070$803/.,
.O245:0/0:3,47,3,.O325,39,7:388902,/0089O3/080:7/,//0,31472,.O3
$$-,8,/403$
8/3/2019 Iso 27002_2005
2/187
08/0.42457207,039/,//03472,,.O3,3;02:3/,$798$9,3/,7/8
3899:943,47,3,.O3-79E3.,06:;,0390,#0385,N,087085438,-0/0,
5:-.,.O3/025479,39083472,8.424
!:-.,.O3$ ,47,$
!:-.,.O3$ ,47,$
!:-.,.O3$ ,47,$$
,3472,$/0$,5,70.O54757207,;003.434-094/0574547.43,7,
.:,6:07025708,-79E3.,434 :3.43:394/0-:03,857E.9.,85,7,,089O3/0,80:7/,/
/08:31472,.O3
,57207,5,790/0,3472,$1:0:3,:J,/0-:03,857E.9.,85,7,,6:03480
089,-0.J,:3086:02,/0.0791.,.O38,80:3/,5,790$5:-.,/,54757207,
;003,6:0089,-0.O48706:8948/0:388902,/080:7/,//0,31472,.O3$$
5,7,807.0791.,-0547:3,039/,/3/0503/0390
,8/485,7908/0,3472,$8070;8,74303,57207,5,79080,/459O547$
83.,2-488:89,3.,08.424$030,N4
38070;8O$5,7,,/0.:,780,,14841J,/03472,8$/088902,8/0089O3
3.432E8/0025708,8.0791.,/,803$0890086:02,805:-.O547$
.424089E3/,7$,902546:08070;8O,.9:,O$89,92,3472,80
70342-7O.424$0/0:4/02,390303/40.43903/4,8J.4240,N4
/05:-.,.O31472,/0,70;8O3
8/3/2019 Iso 27002_2005
3/187
8/3/2019 Iso 27002_2005
4/187
!4J9.,/080:7/,//0,31472,.O3
9nfffffnnffffffnfnfn fffnf
fnnffnf nf nff fnnffnnffffnffnfnffnfff
fnffffffn
nnffffn
fnnfffnfnfnff
ffnnnffnfffffff
8/3/2019 Iso 27002_2005
5/187
nn ffnnfx9ffnffnf
nffnfn nnfffnfnffnffnfn
-fffnf ffnf
@xn nnxhfff
8/3/2019 Iso 27002_2005
6/187
fffffn nnfffffffnfnnffffn fn fnfn ,ffnfn
ffn
fffnn nffnnnnnnfnfnnffnfnf
fnnn 9n nnfnfnnnf
ff nffffffn
n
8/3/2019 Iso 27002_2005
7/187
fnn nfnnffnnfffnf fff
,f fnffnnnnffnnf,fnfnnnnfnnf
%fnn fffnnnfffff
%ffnn9nfnfnnf
ffffnf
%fnfnffffffnnfnhfn
ff fnfnnf
8/3/2019 Iso 27002_2005
8/187
%fnn nnffffn
ffnfn nnfff
@xn nnxhfff
nfhf nnfnfff
ffnff nfnnffff
fffn
$$$f$
8/3/2019 Iso 27002_2005
9/187
9nff nnff
nffffffn ffnfn
fn fffnnfnfnffn
ffffnf ffnnfff
fnfff hfff
nnfnfn ffnfnfnnfnfnfnfnfnnnfnfnnffnfffffffnnffnnnnnn
fnn nffnfnnfnnffffnfnnffnfnnfffnfnnfffnfnfffnfhff
8/3/2019 Iso 27002_2005
10/187
nffffnfffnffnnffnfnnnhnffnffnf
fffxnnf
nfffn nfnxffffnnfffnf
fnfn fnffffnffnfn
nfnfnfffn xnnnfnfffffn
ff fnfnnf
n9nffffnnfff
8/3/2019 Iso 27002_2005
11/187
8/3/2019 Iso 27002_2005
12/187
fnnnffffn
fnnffffnffnff
ffnffnffffnfffffffnfffn
fnffffn
ffnfffffffnfnffffnffnfnnffffn
9fffffffff%nffxn,ff ,n
8/3/2019 Iso 27002_2005
13/187
fnff
fnffffffffffffn
9ff nfnfnffnfff ffffn%nffxfnn
9nfnnff@ffffn
ffnnffnffnffffn
nnff
fnffffnfnnfffnnffnfnn
ffnfffn
8/3/2019 Iso 27002_2005
14/187
fnnxnf
ffnfnnfnff
fnfnf
,n @f f f ff f n f nf f ff nnf f 9 f f f f f f
,n
ff n f n J f ff f f f f nn n n f f n fn f nf f n n f ff f f f f ff ff f fnn f
J
fn fnfff nf ff fff h fnf nf n ff f n nn n fn f fh f nnf f hnf nn ff f n f f x
f
f ff f f fn f
f@
8/3/2019 Iso 27002_2005
15/187
ffffn
fffhnnffffnffffff
fn ffn%nnfnnfffffnfnfnfnfnfffffffn
8/3/2019 Iso 27002_2005
16/187
, f n
@ n n f n f f f , f f f ff f f nf fn ff
n
f ff ffn f ,n%,@ f f f ff ff ffff f f ffn f f ff x f @ 9f f nff f f n fn nnf
ff f
@n f
@ fn f n f f nf ff f fn
, f f nf %,
fnfn
9nfn
8/3/2019 Iso 27002_2005
17/187
n
#085438,-/,/84-7048,.9;48
3;039,74/0,.9;48#085438,-0/048,.9;48.:07/4884-700:84,.059,-0/048,.9;48
,81.,.O3/0,31472,.O370.97.08/0.,81.,.O3
,7.,/497,9,20394/0,31472,.O3
,0897:.9:7,/008905:394/0,3472,08
8/3/2019 Iso 27002_2005
18/187
#085438,-/,/84-7048,.9;48
nffffnnfnfffnfffn
9n
@fnfnffff
fnffffffnfff
fffnfnffffnnnnffffn-fffnnfffnffnnfn
x#fnffffnfn
fffnfnnffnfnnff ffnx#fnffffnfffn
8/3/2019 Iso 27002_2005
19/187
@fnffnffnfnnnfffnhf
3;039,74/0,.9;48
n n ff 9 f ff @ ff
n
9f f nf nf @ f f f f n f n
9f
9ff f fn ff fn % nffx
f @n
!48-08$4:.4308,0890.43974
8/3/2019 Iso 27002_2005
20/187
#085438,-0/048,.9;48
@fffnfnfnffnfffff
fnfnffffffffn
9fffff
fffnffffn%nffx
f @n
!48-08$4:.4308,0890.43974
8/3/2019 Iso 27002_2005
21/187
nfnffn
fnfnffffnfffnfffnfnfnffnffffn
%nf
ffffff
f-@
!48-08$4:.4308,0890.43974
8/3/2019 Iso 27002_2005
22/187
ffffnf
,0897:.9:7,/008905:394/0,3472,08
$0:7/,/03,/013.O3/097,-,44870.:78483.:8O3/0,80:7/,/03,87085438,-/,/08,-47,08$00..O354J9.,/0507843,%F72348.43/.4308/0,70,.O3,-47,
$0:7/,/030/080250N4/0,81:3.4308/002504
$:507;8O3/0,84-,.4308472,.O3.,5,.9,.O30380:7/,//0,31472,.O3!74.0/20394/8.53,74
3,,.O34.,2-4/05:0894/097,-,4080/07085438,-/,/08#0899:.O3/0,.9;48,3.0,.O3/05072848/0,..084
8/3/2019 Iso 27002_2005
23/187
$0:7/,/03,/013.O3/097,-,44870.:7848
ffnfffnffffffffffn f nfffffn
9n
ffffffffnffnffffnnfnffffxnn@nffffnfffnfffnnffnffnffffffnfffnffnnfffnfffnn ffnfnfff
8/3/2019 Iso 27002_2005
24/187
nfffffff
fnffffffnffnnnfnfnfnffffnfffn
f9ff
fnff%x
fnnff,nnn
nnfnnnnf
!48-08$4:.4308,0890.43974
8/3/2019 Iso 27002_2005
25/187
f9fffnff%x
fnffnnffnffnnf
nnff
nfnn
+
$00..O354J9.,/0507843,
43974$0 /0-07J,3 70,,7 70;84308 /0 ;071.,.O3 /0 ,390.0/03908 /0 48 .,3//,948 , 02504 .4397,989,8
907.0748 03 .43.47/,3., .43 ,8 70:,.4308 F9., 008 700;,3908 /0-03 807 574547.43,08 ,48 706:07203948 /0 304.4 , .,81.,.O3 /0 , 31472,.O3 , , .:, 80 ;, , 90307 ,..084 48
70848 507.-/48
!48-08$4:.4308,0890.43974
8/3/2019 Iso 27002_2005
26/187
f9fffnff%x
nnff
fnnnfffnfnff
%F72348.43/.4308/0,70,.O3,-47,43974424 5,790 /0 8: 4-,.O3 .4397,.9:, 0250,/48 .4397,989,8 907.0748 /0-07J,3 ,.059,7 172,7 48
9F72348 .43/.4308 /0 .4397,94 /0 02504 0 .:, 089,-0.07E 8:8 4-,.4308 ,8 4-,.4308 /0
, 47,3,.O3 5,7, , 80:7/,/ /0 31472,.O3
!48-08$4:.4308,0890.43974
8/3/2019 Iso 27002_2005
27/187
$0:7/,/030/080250N4/0,81:3.4308/002504
ffnffnffnnffffffffnhfff nnfnfffffnfffffnfnfff
9n
fffffnnffffffffnffffffffnffnffnfffnffnfnnnfnnfnnffnfnnfnnffnfffnn ffffnnnffffffnff
8/3/2019 Iso 27002_2005
28/187
f9fffnff%x
fnfffff f
$:507;8O3/0,84-,.4308
43974
,70..O3/0-07J,706:077,0250,/48.4397,989,8:8:,748/0907.07,85,7908,5.,7,80:7/,/
03.43.47/,3.,.43,854J9.,848574.0/203948089,-0./48/0,47,3,.O3
!48-08$4:.4308,0890.43974
8/3/2019 Iso 27002_2005
29/187
nfffffffn%ffD-$fhf
nnnnhnnfffnfffffffnfnnnffnfnfffnnnfnf
ffffnfffn
ffff$
n
@fnf ff@nfff,ffnnf@
nnfffnfnf@fnf
n
@nfffffnffnffnfffff
fnffffnfff
ffffffnfffffffffnff,nfn
,nn
f @
43974
%4/48480250,/48/0,47,3,.O3/43/080,700;,390.4397,989,8:8:,748/0907.0748
/0-07J,370.-7039703,20394,5745,/4/0.434.20394,.9:,,.430870:,7080354J9.,8
574.0/20394847,3,.43,08.42480,3700;,39085,7,,1:3.O3/08:97,-,4
!48-08$4:.4308,0890.43974
472,.O3.,5,.9,.O30380:7/,//0,31472,.O3
8/3/2019 Iso 27002_2005
30/187
D,ff%fnfnffffffffnfffnffn
nff fnffn
f,ff
nnfnnnfnffffffnnfff
nnnfffffnfnffffffxff9
fffnnfffnnnfn
@nf
n nff
fnffffnnnnffnnffnfff
fffnnnnf@ffnfff&nf-@$$I&n
f$ff&nf$++
n
,nnffnffff9f@fffn
ffffffnfff
n
fhff9fnnfffnnfnnfffffffnfn
fffn
nf9nnf
fnxnnfnfnfnfffff
ffn;fffnffffnfnnff
;
8/3/2019 Iso 27002_2005
31/187
!74.0/20394/8.53,74
fnfnffff nfnff
f
8/3/2019 Iso 27002_2005
32/187
3,,.O34.,2-4/05:0894/097,-,4
ffffnffnffffffffnnffffff
9nffnffffffffffffnffnffnffnff fnfnfnnnfffffffnfffnfffnfnfnnffnfnnfnn
8/3/2019 Iso 27002_2005
33/187
080/07085438,-/,/08
fffffnffffnnfxffnffffff
8/3/2019 Iso 27002_2005
34/187
#0899:.O3/0,.9;48
@fnffnffnfffnxffffnnffn
fnffnffffffnfnnffnfffnnnffnxfffnnffffnfffnnfxnfnffnffnnffffnffnfffffffnfffffffnfnf% nfnffnffnnnfffffnnffnnffffffffn
8/3/2019 Iso 27002_2005
35/187
,3.0,.O3/05072848/0,..084
ffnfnnfffnfffnfffnffffnnffn ffffnnffnffnfnf
f@ffffnfnfnfnnffnfnfnffnfnffnffnfnn
nffffffnfnnfffff
nfnnfffffnfnnnnfffnfnffnnfn% nf
nnffnfnfnnfn fnffffn
fnfffnfffnfffffnffnffnffffffffnnfnffn
8/3/2019 Iso 27002_2005
36/187
,3.0,.O3/05072848/0,..084
nfnnfffnfnfnffnffffnfnnffffnnfnffnfffnfnffffffnffffnfffnffnffnnfnf
fnfnf
nfnnfnfnfnnfffffffnfhffnfffnf
fnnfnfffnfffnnfffffffhfnfffnnfnfffnnfff
nfnfffnffnfnfffnffnfnffffffffnnffn
nfnffffnnffnff
8/3/2019 Iso 27002_2005
37/187
$0:7/,/J8.,/0394734,0897:.9:7,/008905:394/0,3472,0870,880:7,8!07J20974/080:7/,/1J8.,43974081J8.48/00397,/,$0:7/,//041.3,8/085,.4870.:7848!7490..O3.4397,,203,,809073,8/00394734
97,-,403E70,880:7,870,8,8,/,8/0.,7,/08.,7,$0:7/,//04806:548389,,.O357490..O3/006:548$:2389740F.97.4$0:7/,//0.,-0,/4
,390320394/006:548$0:7/,//006:5481:07,/0484.,08/0,7,3,.O3$0:7/,/03,70:9,.O34023,.O3/006:548%7,8,/4/0,.9;48
8/3/2019 Iso 27002_2005
38/187
8/3/2019 Iso 27002_2005
39/187
9fnf@ffn-fnff
f%nfffnffffffnnfffffhfnffnnffnf
8/3/2019 Iso 27002_2005
40/187
nff@ffn-fnff
fhfffffnfffnfffnfnnnfffff
8/3/2019 Iso 27002_2005
41/187
fnffnn
@ffn-fnff
ffffnfffnfffnffnn
8/3/2019 Iso 27002_2005
42/187
9nnnfffff@ffn
-fnfffffnffnnnfnfnfnffnffffff
8/3/2019 Iso 27002_2005
43/187
ffhff@ffn-fnff
fffnfnnnfffffffffhff
8/3/2019 Iso 27002_2005
44/187
ffffnffnff
fnffhfnffnffnffnnfffffnffffffn
8/3/2019 Iso 27002_2005
45/187
ffxffffnnffnffffn
fnfffffnffffnn
nffffnfnnfffffnnnnfxffnffnfnfnfnnffffnnnffffnf ffffff
nfnfxnnffnfnff
$0:7/,//04806:548
8/3/2019 Iso 27002_2005
46/187
ffnnnffffnfffnfffffnfffnnff
x
8/3/2019 Iso 27002_2005
47/187
xnnfnfffffffxnnff
8/3/2019 Iso 27002_2005
48/187
fnff
fnfffnnfnffnfnnfnfnf
,f
8/3/2019 Iso 27002_2005
49/187
,f
fffnfffffffnfff
f f nf f ffn
8/3/2019 Iso 27002_2005
50/187
ffnffffn
ffnfffnffnffffnnffh
$ / / 9 O O /
8/3/2019 Iso 27002_2005
51/187
f f-%-fnffn
fn-ffnffn
nfffnfnnffff
nffn
-
$0:7/,/03,70:9,.O34023,.O3/006:548
43974
0-07J,70;8,780.:,6:070020394/006:546:0.43903,/85489;48/0,2,.03,20394.43013/0,7,39,76:0.:,6:07/,948038-08419,70.43.03.,80,,023,/4484-708.794.43
80:7/,/,3908/0,023,.O3
!48-08$4:.4308,0890.43974
@ff fn
8/3/2019 Iso 27002_2005
52/187
@fffn
-ffnffnffnffffn
9O /
8/3/2019 Iso 27002_2005
53/187
089O3/042:3.,.4308507,.4308,0897:.9:7,/008905:394/0,3472,08
!74.0/2039487085438,-/,/08/04507,.O34.:2039,.O3/0574.0/2039484507,9;4843974/0.,2-484507,.43,08$070,.O3/09,70,8$05,7,.O3/04870.:78485,7,/08,7744574/:..O3$:507;8O3/048807;.48.4397,9,/48,907.0748!7089,.O3/0807;.4843947,.O370;8O3/048807;.48.4397,9,/48089O3/048.,2-480348807;.48.4397,9,/48!,31.,.O3,.059,.O3/088902,!,31.,.O3/0.,5,./,/08.059,.O3/088902,!7490..O3.4397,8419,702,.484.O/42O;0//,8.4397408.4397,8419,702,.4840//,8.4397408.4397,.O/42O;
089O339073,/08454790870.:507,.O3#0.:507,.O3/0,31472,.O3089O3/070/084397408/070/
8/3/2019 Iso 27002_2005
54/187
$0:7/,/0348807;.48/070/&9,.O380:7/,//04884547908/031472,.O3089O3/084547908097,J-0823,.O3/084547908
!74.0/203948/0:9,.O3/0,31472,.O3$0:7/,//0,/4.:2039,.O3/088902,83907.,2-4/031472,.O38419,70.:07/485,7,3907.,2-4/031472,.O38419,70$0:7/,//0845479080397E3894038,07J,00.97O3.,
3907.430O3/088902,8.4331472,.O3/0304.4$8902,8/031472,.O3025708,7,08$07;.48/0.4207.400.97O3.4$0:7/,/03.4207.400.97O3.4$0:7/,/0397,38,..430803J30,$0:7/,/0331472,.O35-.,
43947,.O3#08974/03./03.,8$0:20394/0:84/04888902,8!7490..O3/0487089748/03./03.,8,748/04507,.O3/0,/23897,/474507,/47#08974/01,48
$3.743,.O3/0704
%,-, /0 .43903/48
8/3/2019 Iso 27002_2005
55/187
fffnnnffnfffn
ffnffnffffn
nffffffnnfnnffffnnffnnfffhffnffnfffnfffnf
ffnf
%,-,/0.43903/48
4,03.,-0,/48
8/3/2019 Iso 27002_2005
56/187
nfnnf@ffn
-fnfffnf fnfnfnfn
8/3/2019 Iso 27002_2005
57/187
nffnf@ffn
-fnfffnfnffnffffn
8/3/2019 Iso 27002_2005
58/187
ffn n ff f nn
8/3/2019 Iso 27002_2005
59/187
ffnnfffnn
fffnnffffnnfffnfnnffnffffnf
%,-, /0 .43903/48
8/3/2019 Iso 27002_2005
60/187
fffffffnffnnfnfnfnnn
fffnfnfffnfnnnfnffnfnn fnfnn
%,-,/0.43903/48
4,03.,-0,/48
43 74 $ / - J 9 9 / / / / 1 / / 9 /
8/3/2019 Iso 27002_2005
61/187
nf
nnn
nffnfnnfnnn
fnfn%x
fffJ
f-fnfff,
ff
$0/0-07J,,7,39,76:048.4397408/080:7/,//013.4308/0807;.43;008/003970,3.:/48
.438:9,7
!48-08$4:.4308,0890.43974
8/3/2019 Iso 27002_2005
62/187
,fnnnff@ffn-fnff
nfnfffffffffffff
nfnnff
8/3/2019 Iso 27002_2005
63/187
ffnffnn f
ffnfffnnnnfffnffnnnffnfffn
%,-,/0.43903/48
8/3/2019 Iso 27002_2005
64/187
,fff
ffnfnffnfffffffffffnffnffnfnnfffff
fffnnnffnfffnnfffffnnffffnfnfnf
f
4,03.,-0,/48
9fnfnnffnf
8/3/2019 Iso 27002_2005
65/187
@ffn-fnff
ffnfnfnnf
nffnffnffffnffnff
nfnf
8/3/2019 Iso 27002_2005
66/187
@ffn-fnff
ffnnfnfnffffn
fnffnfffffffnfffffffnfn
%,-,/0.43903/48
- /
8/3/2019 Iso 27002_2005
67/187
9fffffn
nfnfnffnffnnnfnnfffnfffnfffnnf fnnhnffnfff fnfffnnnfff fnfffffnnf
nfffnffnn
4,03.,-0,/48
.438:9,7
.438:9,7
8/3/2019 Iso 27002_2005
68/187
n ffJnf f
nfff
fffffnffJf
I@fnfhfnn
nffffff
ffnnfnfD
hfnffnfhnf
ffffnff
ffnfff
I@f
nnfnffffn
fnfn%x
$
,nnfnfnnfnff
ffnfff9
,nn
f
-D@,
f-ffffn-fnf
nfnn
nfI9,@fn
-D@,
.438:9,7
.438:9,7
!48-08$4:.4308,0890.43974
8/3/2019 Iso 27002_2005
69/187
,fnnfn@ffn-fnff
ffnf ffn nfnfnfffnnffnffnffffffnnnff
%,-,/0.43903/48
4 , 03.,-0,/48
8/3/2019 Iso 27002_2005
70/187
,fffffnfffnnnfn
ffnnfffnffffnfff% nfffffnffffnfn
4,03.,-0,/48
nfnffn
8/3/2019 Iso 27002_2005
71/187
ffnfnfffffnnfnffnnfnffnffnfn
%,-,/0.43903/48
4 , 03.,-0,/48
8/3/2019 Iso 27002_2005
72/187
ffnnffnffnnfnff
fffffnf
nffffffnffnffnfnffnn9fnfnfnfnffnfffnf
4,03.,-0,/48
$05:0/003.4397,731472,.O3,/.43,84-700380:7/,//070/08 03$%0.344J,/0,
!48-08 $4:.4308 , 0890 .43974
8/3/2019 Iso 27002_2005
73/187
-f%-,fff nf fn
fff ff f
fnfnfnffnfnfn%x
-,9
@Jffffnf
f@nff
f
J
fnnfnf
nfff
n%fnf
fnfnffffn
,fnfn
,fnO
fn
f-@
,nnnff@D@9fnf
ffnnffnnfnf
ff
-@
$J-nf
nnff
ffnnnf
nff
,fff
!48-08$4:.4308,0890.43974
$0:7/,/ 03 48 807;.48 /0 70/
8/3/2019 Iso 27002_2005
74/187
8.4#4:907:/9%441473/48,3/&3-9948.4708.4#4:907$
-9948.4708.4!170,8,3/3.:/08-03.2,7/4.:20398!147
-498.4$,3/8.4$$,3/!80.:798099383F8
#%8.4
%8:/0/8.:8808908.4$-08957,.9.08/0838,3/.431:7,9438
,3/574;/0830947,3/80.:79033007899030.088,731472,94394059028:..00/3/083325020393,3/4507,9380.:7030947
317,897:.9:708-,80/438.4574/:.98,3/90.344083F8
$8.4
503$4:7.0%75708419,708,80.:79,3//,9,39079944:801:147
2439473,3/,079343850.1.10.,30843,7,3041889028%0
5740.98-,80/43.4/0473,.4397-:90/-%75703.3
%7570
/;,3.0/397:843090.9433;7432039489-,80/944
43974
$0 /0-07J,3 /0391.,7 0 3.:7 03 .:,6:07 ,.:07/4 84-70 807;.48 /0 70/ ,8 .,7,.907J89.,8 /0
80:7/,/ 48 3;008 /0 807;.4 48 706:8948 /0 089O3 /0 94/48 48 807;.48 /0 70/
3/0503/039020390 /0 6:0 08948 807;.48 80,3 574;8948 /08/0 , 5745, 47,3,.O3 4 80
.4397,9,3 /08/0 0 090747
!48-08$4:.4308,0890.43974
$0:7/,/0348807;.48/070/
$0:7/,/ 03 48 807;.48 /0 70/
8/3/2019 Iso 27002_2005
75/187
50384:7.0 489-,80/ 397:843 /090.943 88902 $ 574;/08 10 39079
.0.3 ,3/ 4 10 2439473,3,88 ,8 0 ,8 74499 /090.943 54792439473 /090.943 41 74:0 $& 00.:9,-08 ,3/ //03 574.08808 0830/
94 243947 2:950 4898 9 549039, /1107039 4507,93 889028 &3 3:
33/48
$,2,3
!48-08$4:.4308,0890.43974
$0:7/,/0348807;.48/070/
&9,.O3 80:7/,/ /0 48 84547908 /0 31472,.O3
8/3/2019 Iso 27002_2005
76/187
&9,.O380:7/,//04884547908/031472,.O3
!73.548
fnfnf
ffnnffnfffnhn%nnfnfffffnfnfnfffnnfnffnnfnfff
-09;4
fffnnfnffnnfnfffnffnffffn
f
8/3/2019 Iso 27002_2005
77/187
43974
$0/0-07J,3089,-0.07 574.0/2039485,7,,089O3/04820/4831472E9.487024;-08
f
23,.O3 /0 84547908
8/3/2019 Iso 27002_2005
78/187
-ffnfnfnfffnnnffn fn
ffnfff fnf xnfff
nnfnf
f
43974
$0/0-07J,3023,74820/48/01472,80:7,837084.:,3/4,34 80,3706:07/48
:9,3/4574.0/2039481472,08
!48-08$4:.4308,0890.43974
23,.O3/084547908
9n :9,.O3 f fn
8/3/2019 Iso 27002_2005
79/187
43974
$0 /0-07J,3 089,-0.07 574.0/203948 5,7, , 2,35:,.O3 ,2,.03,20394 /0 ,
31472,.O3 .43 0 4-094 /0 5749007 089, 31472,.O3 .4397, /;:,.4308 4 :848 34 ,:947,/48
4 3,/0.:,/48
9n:9,.O3 ffn
$0:7/,/ /0 , /4.:2039,.O3 /0 88902,8
8/3/2019 Iso 27002_2005
80/187
43974
$0/0-07J,5749007,/4.:2039,.O3/04888902,8 .4397,,..084834,:947,/48
$0:7/,//0,/4.:2039,.O3/088902,8
3907.,2-4 /0 31472,.O3 8419,70
8/3/2019 Iso 27002_2005
81/187
3907.,2-4/031472,.O38419,70
!73.548
$0/0-07J,370,,7483907.,2-4884-70,-,80/0:3,54J9.,1472,/03907.,2-4803
48,.:07/48/03907.,2-4.:257.43,08,.O3.47708543/0390.438:9,7.E:8:,
$0/0-07J,3089,-0.07574.0/2039483472,85,7,5749007,31472,.O34820/481J8.48
6:0.439030331472,.O30397E3894
-09;4
,fffffnfnfffffnnnfff
!4J9.,8574.0/203948/03907.,2-4/031472,.O3
8/3/2019 Iso 27002_2005
82/187
42502039485,7,3,;0,/4770,.43,/48.43,
!7;,./,/80:7/,/4250203948704
3E88/0;:307,-/,/085,7,!;4 $50.,!:-.,943$%
'$%,8-003 700,80/ 9 &$311 . 3.:/08
&39071,.0'4! ;/0470,920 2439473%%!9
24/1.,943 41!5430 10,9:7087,9:94:8 #!
/8,-02039 -5,888:55479,3/8:55479 147 80;07,.425708843 .4/0.8
'!#'$%
,7'8,8:9041944814705473.,8813,3/
,:/939005430889028,7'
43974
$0/0-07J,3089,-0.0754J9.,8574.0/203948.43974081472,08/03907.,2-4.434-094/0
5749007,31472,.O320/,3900:84/094/4954/0807;.48/0.42:3.,.O3
!48-08$4:.4308,0890.43974
5
.:07/48/03907.,2-4
8/3/2019 Iso 27002_2005
83/187
nnf
$$n
43974
$0/0-07J,3089,-0.07 ,.:07/48 5,7,03907.,2-4/031472,.O38419,7003970,
47,3,.O3,85,790809073,8
!48-08$4:.4308,0890.43974
$45479081J8.480397E3894
8/3/2019 Iso 27002_2005
84/187
nnf @n
,ffnfnffnffnnnfnfffnnffnffDffnffffnfffnffffnfffnfnhffnnnfnfnff
43974
$0/0-07J,357490074820/486:0.439030331472,.O3 .4397,,..08434,:947,/42,:84
4.477:5.O3/:7,390097,38547901:07,/04829081J8.48/0,47,3,.O3
!48-08$4:.4308,0890.43974
5
038,07J,00.97O3.,
8/3/2019 Iso 27002_2005
85/187
ff ffffnnff
f9,%fn ,f f
fff
43974
$0/0-07J,5749007,/0.:,/,20390,31472,.O3.43903/, 03,2038,07J,00.97O3.,
!48-08$4:.4308,0890.43974
8/3/2019 Iso 27002_2005
86/187
$07;.48/0.4207.400.97O3.4
8/3/2019 Iso 27002_2005
87/187
-09;4
fffnnnnn
!73.548
fnffnfnffnffnn
nnnnnffnnfffnfffffnnnfnffffxfnfffxnff
$0:7/,/03.4207.400.97O3.4
8/3/2019 Iso 27002_2005
88/187
ff ffffnnfff9,%fn ,f f
fff
,ffnfnfffnfnnffnf@ffnf
nnnf% nf@nfnffnffnfffn
nffnf
-
43974
$0/0-07J,5749007,31472,.O33;4:.7,/,030.4207.400.97O3.46:05,8,54770/08
5:-.,8.4397,,.9;/,/0817,:/:039,8/85:9,8547.4397,948/;:,.O34 24/1.,.O334
,:947,/,8
!48-08$4:.4308,0890.43974
$0:7/,/0397,38,..430803J30,
8/3/2019 Iso 27002_2005
89/187
077,2039, 7,9:9,0307,172,8.4/1.,/,880301472,94
!$4$75947,5. 088,0 $39,-,,72,5
,3:7450,3/0399.,7/834.439,3,82,79.,7/.5
06:550/91:3.943,9081474330,:9039.,943%0,70
:8:,.,0/00.9743./0399.,7/80 .,7/8%8705479
14.:80843,:9039.,943:8382,79.,7/8,3/.425,70898
,5574,.94907.4224320,3841,:9039.,943
$705479
43974
$0/0-07J,5749007,31472,.O325.,/,03,897,38,..430803J30, 5,7,570;037,
97,3828O33.42509,037:9,2039406:;4.,/4,907,.O3/;:,.O3 /:5.,.O3470509.O334,:947,/,/02038,0
!48-08$4:.4308,0890.43974
$0:7/,/0331472,.O35-.,
8/3/2019 Iso 27002_2005
90/187
077,2039, 7,9:9,0307,172,8.4/1.,/,88030
1472,94!$4$75947,5. 088,0
$39,
-,,72,5
$.,330781700450384:7.09440984:/090.9,3/
7024;02,.4:8.4/08,3/0-5,08;7:8081742
4:73:&3807;070,8,3/,:942,9.,
$.,3307
43974
$0/0-07J,5749007,3907/,//0,31472,.O36:05430,/8548.O3 03:388902,/0
,..0845-.4 5,7,570;03724/1.,.430834,:947,/,8
!48-08$4:.4308,0890.43974
8/3/2019 Iso 27002_2005
91/187
#08974/03./03.,8
8/3/2019 Iso 27002_2005
92/187
$4:94381742",-8,706:.-0.4239089,3/,7/147.0397,0/2,3,020394103907578030947,3/80.:7931472,943 ",-8
$5:3 8,3%80,7.,3/,3,880330988419,709,90984:3/080,7.
,079,3/70547943;0,3/8947.,%/,9, ;34:;8-9,.74884:7
03970%317,897:.9:7017424304.,943370,920#0/:.09092094
974:-08449%574-028,3/80.:793./03989423:9084780.43/83890,/41
4:7847/,8
$5:3
%0$,2,3 489-,80/397:843/090.94388902$574;/081039079
.0.3,3/4102439473,3,88,80,874499 /090.9435479
2439473/090.9434174:0$&00.:9,-08,3///03574.08808$,2,3
-003/0830/942439472:95048989549039,/11070394507,93
889028574;/3.0397,0/43,3/2,3903,3.0,94:9.,3,84-0
:80/,889,3/,430,55.,94343,830489
$,2,3
43974
$0/0-07J,3574/:.72,390307/:7,390:35074/4089,-0./4487089748/0
,:/947, .43 , 7,-,.O3/0,8 ,.9;/,/08/048:8:,7480.05.43080;03948/0,
80:7/,//031472,.O3 .43013/01,.9,7,83;089,.43081:9:7,8024394704/048
.4397408/0,..084
!48-08$4:.4308,0890.43974
$:507;8O3/0:84/04888902,8
8/3/2019 Iso 27002_2005
93/187
&3-:0 -70,--490.,03J30,.4257038;,/0574.0848089E
5,7,.,/,:346:030.08908,-07,3,9:7,0,05745O8940,.948/0.,/,574.0846:0/0-034/0-,1:3.43,7038:! !74.088-7,7
$5.0478 890.425090309472,3,020392439473
05/08!3;039478419,70705479384:943942,3,0
;0793%382,,3/20/:2-:8308808
$5.0478
!,4843/02,3/944:8308808.,3/8.4;07,907%
31472,943,3/09389,39,3807894907.425:90730947,3/80.:796:089438 !,4
$34798,3450384:7.030947397:843570;03943,3//090.943
88902$!$/0;0450/-$4:7.017042-3390-03019841
83,9:7057494.4,3/,342,-,80/3850.943$34798902489
/0/0540/$!$90.34447//0
$3479
43974
$0/0-07J,3089,-0.07 574.0/2039485,7,0:84/024394704/0,8389,,.O3/0
574.08,20394/031472,.O3 70;8,770:,72039048708:9,/48/0,8,.9;/,/08/024394704
!48-08$4:.4308,0890.43974
8/3/2019 Iso 27002_2005
94/187
!7490..O3/0487089748/03./03.,8
8/3/2019 Iso 27002_2005
95/187
43974
$0/0-07J,3574900748807;.48,31472,.O3/0708974/0,,.9;/,/.4397,,..4308
14748,84,..084834,:947,/48
8/3/2019 Iso 27002_2005
96/187
8/3/2019 Iso 27002_2005
97/187
$3.743,.O3/0704
8/3/2019 Iso 27002_2005
98/187
f-@9ff
fnnfnnfn
fnJf
43974
$0/0-07J,383.743,74870408/094/484888902,8/0574.08,20394/031472,.O3/03974
/0,47,3,.O34030/4234/080:7/,/ .43:3,1:0390,.47/,/,0,.9,/090254
!48-08$4:.4308,0890.43974
43974/0..0848
8/3/2019 Iso 27002_2005
99/187
,0897:.9:7,/008905:394/0,3472,08
#06:8948/0304.45,7,0.43974/0,..0848
!4J9.,/0.43974/0,..0848
089O3/0,..084/0:8:,74
#08974/0:8:,74089O3/057;048
089O3/0.4397,80N,8/0:8:,74#0;8O3/048/070.48/0,..084/048:8:,748
#085438,-/,/08/0:8:,74
&84/0.4397,80N,6:5431472E9.4/0:8:,74/08,903//4
!4J9.,85,7,08.794748243947088331472,.O3
43974/0,..0840370/
!4J9.,/0:84/048807;.48/070/:9039.,.O3/0:8:,745,7,.430430809073,8:9039.,.O3
/034/48/0,70/
43974/0..0848
8/3/2019 Iso 27002_2005
100/187
!7490..O3,5:07948/0/,3O89.4702494$070,.O303,870/08
43974/0.430O3,,870/0843974/003.,23,2039403,70/
43974/0,..084,88902,4507,9;4
!74.0/203948/0.430O3/090723,08/0391.,.O3,:9039.,.O3/0:8:,74
$8902,/0089O3/0.4397,80N,8&84/048807;.48/088902,08.430O3,:942E9.,/090723,0829,.O3/090254/0.430O3
43974/0,..084,,8,5.,.4308
#0897..O3/0,..084,,31472,.O38,20394/088902,88038-08
31472E9.,2O;90097,-,4
31472E9.,2O;%0097,-,4
8/3/2019 Iso 27002_2005
101/187
8/3/2019 Iso 27002_2005
102/187
089O3/0,..084/0:8:,74
8/3/2019 Iso 27002_2005
103/187
-09;4
,7,39,70,..084,48:8:,748,:947,/480250/748,..084834,:947,/48,48
88902,8/031472,.O3
!73.548
$0/0-07J,3089,-0.07574.0/2039481472,085,7,.43974,7,,83,.O3/0485072848/0
,..084,4888902,8807;.48/031472,.O3
48574.0/203948/0-07J,3.:-7794/,8,09,5,8/0..4/0;/,/0,..084/048:8:,748
/08/0/07089743.,/0483:0;48:8:,748,89,8:-,,.:,3/4,3480,30.08,748:
,..084,4888902,8807;.48/031472,.O3
$0/0-07J,57089,70850.,,903.O381:07,45479:34,,30.08/,//0.43974,7,,83,.O3
/05072848/0,..084.4357;0486:0808,903,3:03,01.,.,/048.4397408/0
88902,
8/3/2019 Iso 27002_2005
104/187
089O3/057;048
8/3/2019 Iso 27002_2005
105/187
$4:.O30-170097,/,86:050729070,,7,89,70,82E8.42:308.424,8,9,8-,,8/0:8:,748,,5.,.O3/054J9.,8/07:54,97,;F8/0:339071,39:9;41E./0,5703/0797,;F8/08:83147208/09,,/484170.0;8-/,/.42509,84-7094/4848
4-09;4803070.9474.9;4
,3,00330.42
:/98,.4250904:94190-4/,9,-,8080.:79,:/9384:9431477,.0$-,80$",3/$$"$07;07:/9,48/,9,-,80,3/88902
,/23897,947880.:79,/23897,9478,:/9478,3/4507,94789497,.,3/,3,0,3/,9,-,80,.9;93.:/3/,9,-,80,..088,3/:8,0/,9,.70,943.,3047/00943
2,3,3,0/,9,-,80:80786:./8.4;07:57490.90/!,3/!/,9,03147.0$
!$!!.425,3.0,3/2470
:/9
3.09/090.98430472470$"30.943843909,70948990:807.,3.4480,243,;,70941459438945071472,309038;0-,.03//,9,-,802,3,020398890213075739
70970;0$808843:807,3//,9,-,8003:207,90:80785,8847/,80857;008
/,9,-,808/:250397047:8078850.1.$9,-08.4:2387:3843$"89,90203970,/850.1.10843901088902,3/2470
!,343,:/9944
&8074.50729057490070,..084,,870/08/03/4825/03/4,8.4304308
82:9E30,8,/,7,548-/,//029,7,8.4304308/048:8:,748574547.43,3/4,48,/23897,/47080.43974702494/0,88084308/0,81:3.43,/,/08/0,079,/03147208,3E8884-7094/,8,8.4304308/08.4304308010.9:,/,8038:870/08,
;078O3/00;,:,.O3/0&8074.08;E/,/:7,390/J,84.425479,33:3,29,.O3039F72348/01:3.43,/,/08
&8074.
43974
$0/0-07J,7089737.43974,7,,83,.O3:84/04857;048
!48-08$4:.4308,0890.43974
8/3/2019 Iso 27002_2005
106/187
8/3/2019 Iso 27002_2005
107/187
#085438,-/,/08/0:8:,74
8/3/2019 Iso 27002_2005
108/187
!73.548
fnfnfffnfffffnf
ffnnfffnfnnnfnfnfnfnffffn
ffffnfffffnnffnnnfnnffnnffffffn
-09;4
fnnfffnfnnffffffn
&84/0.4397,80N,
8/3/2019 Iso 27002_2005
109/187
#,3/42!,8847/0307,9471700,708/0830/94054:.70,9080.:70#,3/425,8847/89,9,70097020/11.:994.7,.47:0889,.42-3,943417,3/42
407,3/:5507.,800990783:2-078,3/5:3.9:,94382-483/90807,3/420307,90/5,8847/8-08,;0/14720244:.,3;0,2,794900307,90/
7,3/425,8847/147,907.0.
!,8847/0307,947
0307,/474330/0.4397,80N,8 !,8847/08
5.7,. 8,17003/485,8847/.7,.07-,80/437,3-49,-0898,;07
011.0392502039,943417,3-49,-08/430-903;03947841902094/9.42089,7,5.,&80739071,.0,3/7:38432:9505,914728
45.7,.
,3 -08 ,5,8847/ 70.4;07 944 147 .748419507,93 $890289 ,48 0,870.4;07 41;,74:8 3/ 415,8847/8 - 83113 90 30947.7,.303.7590/
5,8847/8 :83 .943,77:9047.0 ,3/759,3,88 ,99,.870.47/3 '4!
.43;078,9438/0.4/3 8.7,2-0/ 5,8847/870.4;073 70088 30947 0870;0,3 5,8847/ -408:3.4;073 .,.0/ 5,8847/8 ,3/,3,3 74:93
57494.48
,3-0
4390#550781700,3/503$4:7.08419,70/897-:90/572,7384:7.0.4/0147214:4:/7,907:80,.42207.,574/:.99,470/1474:7850.1.4507,93
8890250,80.438/074390#5507!74.8/897-:90/572,73901472413,9;05,.,08147909,7094507,93889028,3/30307,820,3994-00,80794
389,,3/:800/0;0734592,5071472,3.09/
4390 #5507
43974
$0/0-07J,07,48:8:,7480:84/0,8-:03,857E.9.,8/080:7/,/03,800..O3:84
/0,8.4397,80N,8
!48-08$4:.4308,0890.43974
6:5431472E9.4/0:8:,74/08,903//4
8/3/2019 Iso 27002_2005
110/187
43974
48:8:,748/0-07J,3,7,39,76:04806:548/08,903//48/854303/0,57490..O3
,5745,/,
8/3/2019 Iso 27002_2005
111/187
8/3/2019 Iso 27002_2005
112/187
8/3/2019 Iso 27002_2005
113/187
:9039.,.O3/0:8:,745,7,.430430809073,8
8/3/2019 Iso 27002_2005
114/187
43974
$0/0-07J,3:9,72F94/48/0,:9039.,.O3,/0.:,/485,7,0.43974/0,..084702494/048
:8:,748
8/3/2019 Iso 27002_2005
115/187
!7490..O3,5:07948/0/,3O89.4702494
8/3/2019 Iso 27002_2005
116/187
43974
fnffnfnfnnnnffn
8/3/2019 Iso 27002_2005
117/187
43974/0.430O3,,870/08
8/3/2019 Iso 27002_2005
118/187
43974
30.,84/0,870/08.425,79/,80850.,20390,6:0,86:0800903/032E8,E/048
J2908/0,5745,7,3,.O380/0-07J,37089737,8.4250903.,8/048:8:,7485,7,.430.9,7800370/803,54J9.,/0.43974/0,..084830.08/,//0:84/0,8,5.,.4308
/0304.4
8/3/2019 Iso 27002_2005
119/187
43974/0,..084,88902,4507,9;4
8/3/2019 Iso 27002_2005
120/187
!73.548
ffffnffffffnnnffffffnfnffnf ffnfnffffnffnfnfnnf ffnfnnnffn fnff ffffnfffnfff nfnfffffnfn fnfnffnf
-09;4
fnnffffff
9
!74.0/203948/0.430O3/090723,08
8/3/2019 Iso 27002_2005
121/187
43974
0-07J,.43974,7800,..084,88902,4507,9;420/,390574.0/20394880:748/0.430O3
9
/0391.,.O3,:9039.,.O3/0:8:,74
8/3/2019 Iso 27002_2005
122/187
43974
%4/4848:8:,748/0-07J,3/854307/0:33.4/0391.,/47574545,7,8::84507843,
0.:8;4$0/0-07J,007:3,9F.3.,/0,:9039.,.O3,/0.:,/,6:0;0716:0,/039/,/70.,2,/,547:3:8:,74
9
$8902,/0089O3/0.4397,80N,8
8/3/2019 Iso 27002_2005
123/187
43974
4888902,8/0089O3/0.4397,80N,8/0-07J,38073907,.9;48,7,39,7,.,/,//0,8
.4397,80N,8
43974
&84/048807;.48/088902,
8/3/2019 Iso 27002_2005
124/187
43974
$0/0-07J,7089737.43974,72:/0.07.,0:84/05747,2,8/0:9/,//088902,6:0
5:/07,3807.,5,.08/00:/748.4397408/05745488902,/0,8,5.,.4308
43974
08.430O3,:942E9.,/090723,08
8/3/2019 Iso 27002_2005
125/187
43974
$0/0-07J,3/08.430.9,7,88084308 97,8:3/090723,/45074/4/03,.9;/,/
43974
29,.O3/090254/0.430O3
8/3/2019 Iso 27002_2005
126/187
43974
$0/0-07J,3:9,729,.430803090254/0.430O36:0574547.4303:33;0/080:7/,/
,/.43,,,8,5.,.4308/0,947084
43974/0,..084,,8,5.,.4308
8/3/2019 Iso 27002_2005
127/187
!73.548
$0/0-07J,3:9,7/85489;48/080:7/,/.434-094/070897370,..084,,8,5.,.4308
8:8.43903/48
$0/0-07J,70897370,..084O.4,,8,5.,.43088419,708:31472,.O33.,20390,
:8:,748,:947,/48
4888902,8/0,5.,.O3/0-07J,3
, .43974,70,..084/048:8:,748,,31472,.O31:3.4308/04888902,8/0,5.,.4308
0370,.O3,,54J9.,/0.43974/0,..0848/013/,- 574547.43,757490..O3.4397,,..084834,:947,/48/07;,/48/0:84/0.:,6:07:9/,/
8419,70/088902,4507,9;48419,702,.4846:05:0/,397,85,8,740:/748.4397408/0
88902,4/0,8,5.,.4308
. 34.42574209074974888902,8.43486:080.425,79,370.:7848/031472,.O3
-09;4
250/70,..08434,:947,/4,,31472,.O32,3903/,5474888902,8/0,8,5.,.4308
43974
#0897..O3/0,..084,,31472,.O3
8/3/2019 Iso 27002_2005
128/187
43974
$0/0-07J,70897370,..084/048:8:,7480507843,/02,390320394,,31472,.O3
1:3.4308/04888902,8/0,5.,.43080370,.O3,,54J9.,/0.43974/0,..0848/013/,
8/3/2019 Iso 27002_2005
129/187
31472E9.,2O;90097,-,4
8/3/2019 Iso 27002_2005
130/187
-09;4
fff f f f fn n hnf ff
!73.548
fnnfffnfnnnfff
fnnffffhnffnfffffnffnnnnffffffnffnfffnnffffffnfnffxfffffff
43974
31472E9.,2O;
8/3/2019 Iso 27002_2005
131/187
0.89 /070;8O3/0.43974085,7,06:548
5479E90897,-,40324;/,/90097,-,4 70/08
3,E2-7.,8 3F8
99593:7.42!479,-0%.0.89
:J,5,7,5749007:8,7/01472,80:7,8:2O; :J,%
43974
$0/0-07J,089,-0.07:3,54J9.,1472,80/0-07J,3,/459,7,820//,8/080:7/,/
,/0.:,/,85,7,,57490..O3.4397,4870848/07;,/48/0:84/04870.:7848/031472E9.,2O;,8900.42:3.,.4308
!48-08$4:.4308,0890.43974
43974
%0097,-,4
8/3/2019 Iso 27002_2005
132/187
%0$8889,398,1700/434,/,-0801
.439,30/70088,:/939449147-49%80.:79
574108843,8,3/3/:8078,0
$
43974
$0/0-07J,/08,774,7025,39,7:3,54J9.,5,3084507,.43,08574.0/2039485,7,,8
,.9;/,/08/090097,-,4
!48-08$4:.4308,0890.43974
8/3/2019 Iso 27002_2005
133/187
/6:8.O308,7744,390320394/0$8902,8/031472,.O3
8/3/2019 Iso 27002_2005
134/187
$0:7/,/0348574.0848/0/08,77448454790
!74.0/203948/0.43974/0.,2-48#0;8O39F.3.,/048.,2-4803088902,4507,9;4#0897..43080348.,2-48,485,6:0908/08419,70,3,0803.:-07948.O/4%74,3408,774409073,,/4/08419,70
089O3/0,8;:307,-/,/089F.3.,8
43974/0,8;:307,-/,/089F.3.,8
8/3/2019 Iso 27002_2005
135/187
8/3/2019 Iso 27002_2005
136/187
$0:7/,//0,8,5.,.4308/088902,
8/3/2019 Iso 27002_2005
137/187
-09;4
;9,7 0774708 5F7//,8 24/1.,.4308 34 ,:947,/,8 4 2, :84 /0 , 31472,.O3 03 ,8
,5.,.4308
!73.548
$0 /0-07J,3 /80N,7 .4397408 ,5745,/48 03 ,8 5745,8 ,5.,.4308 3.:/,8 ,8 /08,774,/,8
547 48 574548 :8:,748 5,7, ,80:7,7 0 574.08,20394 .4770.94 /0 , 31472,.O3 8948.4397408 /0-07J,3 3.:7 , ;,/,.O3 /0 48 /,948 /0 0397,/, 0 97,9,20394 390734 48 /,948 /0
8,/,
!4/7J,3 807 706:07/48 .4397408 ,/.43,08 5,7, 48 88902,8 6:0 574.08,3 4 90303 ,3 010.94
03 ,.9;48 /0 31472,.O3 /0 .,7E.907 8038-0 ;,484 4 .7J9.4 .48 .4397408 /0-07J,3 807
/090723,/48 03 1:3.O3 /0 48 706:8948 /0 80:7/,/ , 0892,.O3 /0 7084
43974
',/,.O3/048/,948/00397,/,
8/3/2019 Iso 27002_2005
138/187
fffffffffnfnfffff
fnnff
43974
43974/0574.084390734
8/3/2019 Iso 27002_2005
139/187
#4::/93%44147$0.:79#%$8,3,:942,90/.4/070;0
944574;/0/473,-$0.:70$419,703.4070,.6:70/-
4791$419,703.98.,38!07!!,3/!94384:7.0.4/0
,3/1,8.4224380.:7970,90/5747,2230774788:.,8-:1107
4;07148,3/%%&%2010.%201&807,.0.43/9438%094450714728,74:,3,88419084:7.0.4/0
#%$
7,:/9 8,82508.759,3/83,9:7080989,9,484:9413/
549039,80.:791,8384:7.0.4/0:8390&:9970598
.425,7,-094490789,9.,3,88,55.,94380#%$$%,3/
1,13/07000539090.3.,706:702039894,232:2,3/
-03;0710-07,:/9 8:5547988.,333.4/079903380;07,
,3:,08,858550755 ,3/5943
#:/9
4/03,88%44%8,-3,7.4/0,3,889449,9058/0391
.42243;,7,39841.079,3570;,3;:307,-9089,9.,3;078094
.42243,99,.;0.94788:.,87488$90$.7593$$$"
30.943,3/!,930.943
.748419%%
%0$$%45489,3074:8!747,223774788,
8941902489/08570,/,3/.79.,5747,2230774789,9.,30,/
948074:88419,70;:307,-908
!48-08$4:.4308,0890.43974
$0/0-07J,33.:7.06:048/0;,/,.O303,8,5.,.43085,7,,/090..O3/0:3,548-0
.477:5.O303,31472,.O3/0-/,,0774708/0574.08,203944/0,..4308/0-07,/,8
43974
:9039.,.O3/02038,08
8/3/2019 Iso 27002_2005
140/187
$0/0-07J,3/0391.,748706:89485,7,,80:7,7,,:9039./,/57490..O3/0,3907/,//0
.43903/4/0482038,0803,8,5.,.43080/0391.,7025,39,748.4397408,5745,/48
8/3/2019 Iso 27002_2005
141/187
4397408.75947E1.48
8/3/2019 Iso 27002_2005
142/187
-09;4
!749007,.431/03.,/,/,:9039./,/43907/,//0,31472,.O3.43,,:/,/09F.3.,8.75947E1.,8
!73.548
$0/0-07J,/08,774,7:3,54J9.,/0:84/0.4397408.75947E1.48
$0/0-07J,089,-0.07:3,089O3/0.,;086:0/08454790,:84/0/0 9F.3.,8.75947E1.,8
43974
!4J9.,/0:84/048.4397408.75947E1.48
8/3/2019 Iso 27002_2005
143/187
nnf n
,nfnfn%x f
nffnnfffnff
,O
ff ffffnnfff9,%fn ,f f
ff
f99 fff9fnffffnnffff
ff fffnnfnnI9 f$,,
-Dn
@ffnfnnffnf -
$0/0-07J,/08,774,7025,39,7:3,54J9.,/0:84/0.4397408.75947E1.485,7,,57490..O3
/0,31472,.O3
!48-08$4:.4308,0890.43974
43974
17,/4
8/3/2019 Iso 27002_2005
144/187
nnf
$$n
ff fff
fnnfff9,
%fn ,ff
fff
$0/0-07J,089,-0.07:3,089O3/0,8.,;086:07085,/00:84/0,89F.3.,8.75947E1.,803,
7,3,.O3
!48-08$4:.4308,0890.43974
$0:7/,//0481.0748/088902,
8/3/2019 Iso 27002_2005
145/187
-09;4
ffffffn
!73.548
fnffnnffnnff
n@ffnfffffnff
43974
43974/08419,70030549,.O3
8/3/2019 Iso 27002_2005
146/187
%8/4.:20398,:/0945,9.2,3,02039/0130/
,890574.08841.43974390/0542039,3/
2,3903,3.041390728419,70700,8083944507,943,
03;74320398
!
%8/4.:2039574;/08:/,3.043.70,93,80.:79
5,9.,3/;:307,-92,3,020395747,2,3/90893
900110.9;03088419,95747,2
$%
$0/0-07J,3089,-0.07574.0/203948.434-094/0.43974,7,389,,.O3/08419,7003
88902,86:0089F34507,9;48
!48-08$4:.4308,0890.43974
43974
!7490..O3/048/,948/057:0-,/088902,
8/3/2019 Iso 27002_2005
147/187
D9fff@%n
$$n
$0/0-07J,3800..43,75749007.43974,7.:/,/48,2039048/,948:9,/485,7,,8
57:0-,8
!48-08$4:.4308,0890.43974
43974/0,..084,,-707J,/05747,2,81:0390
43974
8/3/2019 Iso 27002_2005
148/187
$0/0-07J,70897370,..084,.O/41:0390/0485747,2,8
$0:7/,/0348574.0848/0/08,77448454790
8/3/2019 Iso 27002_2005
149/187
-09;4
,390307,80:7/,//08419,70/088902,/0,5.,.4308,31472,.O3
!73.548
$0/0-07J,3.43974,70897.9,203904803947348/0/08,7744/05740.948/08454790
48/70.9;487085438,-08/04888902,8/0,5.,.4308/0-07J,38079,2-F37085438,-08/0
,80:7/,//05740.944/00394734/0845479048/0-07J,3,7,39,76:094/,8,8
5745:089,8/0.,2-4034888902,884370;8,/,85,7,;071.,76:034.4257420903,
80:7/,//088902,4/003947344507,9;4
43974
!74.0/203948/0.43974/0.,2-48
8/3/2019 Iso 27002_2005
150/187
$0/0-07J,.43974,7,25,39,.O3/0.,2-4820/,390,,5.,.O3/0574.0/203948
1472,08/0.43974/0.,2-48
43974
#0;8O39F.3.,/048.,2-4803088902,4507,9;4
8/3/2019 Iso 27002_2005
151/187
fffffnfnnnfnnffnnf
ffnffffnfffffnfffffn
43974
#0897..43080348.,2-48,485,6:0908/08419,70
8/3/2019 Iso 27002_2005
152/187
ffnffnfnffxf
nnffnfnf
43974
,3,0803.:-07948.O/4%74,34
8/3/2019 Iso 27002_2005
153/187
fffffn
%nf$
43974
08,774409073,,/4/08419,70
8/3/2019 Iso 27002_2005
154/187
$0/0-07J,8:507;8,7243947,70/08,7744/08419,708:-.4397,9,/4547,7,3,.O3
089O3/0,8;:307,-/,/089F.3.,8
8/3/2019 Iso 27002_2005
155/187
-09;4
nfffnffxnnfnff
!73.548
f ff f f ff xnnf x n
hn nnn n f f f n nf
f nf f f f n f f fnfn n
43974
43974/0,8;:307,-/,/089F.3.,8
8/3/2019 Iso 27002_2005
156/187
@fI$9@fnfnf f9nffnnf nfD9nf
n
If9f@
f;f fnffn;nfnf
;nfffff fffnnfffffnn
fn
;,f
I fIfffnnffnfffnf@n
nfff%-I@n
n ffnfI nff-D9
I
!48-08$4:.4308,0890.43974
$0 /0-07J, 4-90307 31472,.O3 45479:3, 84-70 , ;:307,-/,/ 9F.3., /0 48 88902,8 /0
31472,.O3 6:0 80 089E3 :9,3/4 0;,:,7 , 0548.O3 /0 , 47,3,.O3 ,390 9, ;:307,-/,/ 942,7 ,8 20//,8 ,/0.:,/,8 5,7, ,.07 170390 , 48 70848 ,84.,/48
43974/0,8;:307,-/,/089F.3.,8
8/3/2019 Iso 27002_2005
157/187
@Jnfn9n%J9fnffffn nfnff
J9
-O fnfffff ffffn
fnffnnffnf-
fnnfnnffnffn
fnffn fffnnfnffff n
,f
fffnfnfnnffn
@nffffnfnnffOfOnnfnn@ffffffnfff
f
@ 9n
fnffhfnffnfnffn-fnfnfffffff
nfffnffnffxfffffn,nf-nff
fhnf ffnffnf,nff xfffhnfffnffnnfn,n
ffffffhff
-f
089O3/03./03908/0$0:7/,//0,31472,.O3
8/3/2019 Iso 27002_2005
158/187
42:3.,.O3/00;03948/0-/,/0803,80:7/,//0,31472,.O3
42:3.,.O3/00;039480380:7/,/42:3.,.O3/0/0-/,/080380:7/,/
089O3/03./039082047,803,80:7/,//0,31472,.O3
/0391.,.O3/07085438,-/,/08574.0/203948
;,:,.O3/03./039080380:7/,/#0.4/,/057:0-,8
42:3.,.O3/00;03948/0-/,/0803,80:7/,//0,31472,.O3
-09;4
8/3/2019 Iso 27002_2005
159/187
,7,39,76:0480;03948/0-/,/0803,80:7/,/,84.,/48.434888902,8/0
31472,.O380.42:36:03/024/46:0805:0/,370,,7,..4308.4770.9;,845479:3,8
!73.548
0-07J,089,-0.078003147201472,/0480;03948/048574.0/203948/008.,,/,
%4/48480250,/48.4397,989,8907.0748/0-07J,3089,7,9,394/048574.0/2039485,7,
31472,7/048/107039089548/00;03948/0-/,/086:05:0/,39030725,.9403,
80:7/,//048,.9;4847,3,.43,08
$008/0-07J,076:03147203/0.:,6:070;03944/0-/,/03,80:7/,//031472,.O3
42E87E5/4548-0,5:394/0.439,.94/083,/4
43974
42:3.,.O3/00;039480380:7/,/
8/3/2019 Iso 27002_2005
160/187
, fffnnfnn %x f
nnff9fff
@ff
n
9ffnfnf@ffffn
fn9f
,ffn9%-D9nnfffff
nfff,nffn
,
$0/0-07J,3.42:3.,7480;0394803,80:7/,//031472,.O342E87E5/4548-020/,390
.,3,08/0089O3,5745,/48
!,7,2,4731472,.O384-7007054790/00;03948,089O3/03./0390803,80:7/,//0
31472,.O3805:0/0.438:9,7,3472,$%#
!48-08$4:.4308,0890.43974
43974
42:3.,.O3/0/0-/,/080380:7/,/
8/3/2019 Iso 27002_2005
161/187
%4/48 48 0250,/48 .4397,989,8 907.0748 6:0 843 :8:,748 /0 48 88902,8 807;.48 /0
31472,.O3 /0-07J,3 ,349,7 .42:3.,7 .:,6:07 /0-/,/ 4-807;,/, 4 84850.,/, 03 ,
80:7/,/ /0 48 28248
089O3/03./039082047,803,80:7/,//0,31472,.O3
-09;4
8/3/2019 Iso 27002_2005
162/187
,7,39,76:080,5.,:303146:0.43889039001.,5,7,,089O3/0483./0390803
,80:7/,//031472,.O3
!73.548
0-07J,3 089,-0.0780 ,8 7085438,-/,/08 574.0/203948 5,7, 2,30,7 48 0;03948
/0-/,/08 03 , 80:7/,/ /0 31472,.O3 /0 :3, 2,307, 010.9;, :3, ;0 6:0 ,,3 8/4
.42:3.,/48
$0 /0-07J, ,5.,7 :3 574.084 /0 2047, .4393:, 03 7085:089, 5,7, 2439470,7 0;,:,7
08943,7 03 8: 949,/,/ 48 3./03908 03 , 80:7/,/ /0 31472,.O3
:,3/4 80 706:07,3 0;/03.,8 F89,8 /0-03 807 70.4/,8 5,7, ,80:7,7 0 .:2520394 /0 48
706:8948 0,08
43974
/0391.,.O3/07085438,-/,/08574.0/203948
8/3/2019 Iso 27002_2005
163/187
ffnfffnffffffhfnffffnfffn
43974
;,:,.O3/03./039080380:7/,/
8/3/2019 Iso 27002_2005
164/187
fffnDfff
ffff
Dnf
n
0-07J,0897:320.,38246:050729,3.:,391.,72439470,7489548;420308.48908
/0483./0390803,80:7/,//031472,.O3
!48-08$4:.4308,0890.43974
#0.4/,/057:0-,8
43974
8/3/2019 Iso 27002_2005
165/187
480/.7.:9900;843%',3,02039,3/4507,9434/04157,.9.0 995845-874:5.42
425:907/0/;089,9;03;74320398,39,,3&3:;0/897-:943.70,90/,8,5740.9419,47038.8411078,
.425090147038.03;74320399,9847,30/943907,9008938419,709448,88419,7024/:08,3/94574;/0,1703/7,5.,39071,.0
,30
:10,9:70/80.:79/897-:943.43889341,-:3.4154071:450384:7.0,3/170094489,9.,3-0:80/147;,74:85:7548083.:/3-:9349
290/94503097,9439089309.,,.388902,3/30947,/23897,943.-07147038.83;089,943880.:7990893;:307,-9
,3,88,3/2:.2470
,97:
'#08.:008:354/07484:04/0077,2039,83/85038,-05,7,708.,9,7705,7,706:548310.9,/48
'708.,90
%0$$$%4789,9438,',7055,3.09,98570.431:70/9,9030.088,79448945071472,/09,0//9,147038.0,23,94398
.425,9-09507993088472,9/;,3.0/47038.472,9,3/7,//0;/03.01472,98%0-7,3/30;07843,8-003
.42509070-:943,3&-:39: -,8092,3,//943,9448,3/.,5,-9089,9.,32,9.,324/073147038.9448:90
$$
:,3/4 :3, ,..O3 /0 80:20394 .4397, :3, 507843, : 47,3,.O3 /085:F8 /0 :3 3./0390
03 , 80:7/,/ /0 31472,.O3 256:0 ,..O3 0, .; 4 .723, , 0;/03., /0-0 807
70.40.9,/, 70903/, 5708039,/, .4314720 , ,8 70,8 5,7, , 0;/03., 089,-0./,8 03 ,
:78/..O3 700;,390
089O3/04393:/,//004.4
8/3/2019 Iso 27002_2005
166/187
089O3/04393:/,//004.4
850.948/0,089O3/0.4393:/,//0304.4
!74.084/0,089O3/0.4393:/,//0304.44393:/,//0304.4,3E88/025,.948#0/,..O3025,39,.O3/05,308/0.4393:/,/,7.4/05,31.,.O35,7,,.4393:/,//0304.4
!7:0-,2,390320394700;,:,.O3/05,308/0.4393:/,/
850.948/0,089O3/0.4393:/,//0304.4
-09;4
8/3/2019 Iso 27002_2005
167/187
#0,..43,7 , , 39077:5.O3 /0 ,.9;/,/08 /0 304.4 5749007 8:8 574.0848
.7J9.48 170390 , /08,89708 4 7,3/08 1,48 /0 48 88902,8 /0 31472,.O3
!73.548
$0 /0-07J, 25,39,7 :3 574.084 /0 089O3 /0 .4393:/,/ /0 304.4 5,7, 70/:.7 , 3;008
,.059,-08 , 39077:5.O3 .,:8,/, 547 48 /08,89708 1,48 /0 80:7/,/ 6:0 547 00254
5:0/,3 708:9,7 /0 /08,89708 3,9:7,08 ,../03908 1,,8 /0 06:548 4 ,..4308 /0-07,/,8
20/,390 :3, .42-3,.O3 /0 .4397408 570;039;48 /0 70.:507,.O3890 574.084 /0-07J, /0391.,7 48 574.0848 .7J9.48 /0 304.4 0 3907,7 48 706:8948 /0 089O3
/0 , 80:7/,/ /0 31472,.O3 5,7, , .4393:/,/ /0 304.4 .43 49748 706:8948 /0 .4393:/,/
70,.43,/48 .43 /.48 ,850.948 .424 4507,.4308 574;00/4708 /0 507843, 2,907,08
97,3854790 0 389,,.4308
$0 /0-07J,3 ,3,,7 ,8 .4380.:03.,8 /0 48 /08,89708 1,,8 /0 80:7/,/ 5F7//,8 /0
807;.4 , /8543-/,/ /0 807;.4 /08,774,7 0 25,39,7 5,308 /0 .439303., 5,7,
,80:7,7 6:0 48 574.0848 /0 304.4 80 5:0/03 7089,:7,7 03 48 5,48 706:07/48 ,84507,.4308 0803.,08
, 80:7/,/ /0 31472,.O3 /0-07J, 807 :3, 5,790 3907, /0 5,3 0307, /0 .4393:/,/ /0
304.4 /0 48 /02E8 574.0848 /0 089O3 /03974 /0 , 47,3,.O3
, 089O3 /0 , .4393:/,/ /0 304.4 /0-07J, 3.:7 ,/.43,20390 , 574.084 /0 0;,:,.O3
.4397408 5,7, , /0391.,.O3 70/:..O3 /0 70848 29,7 ,8 .4380.:03.,8 /0
3./03.,8 /,N3,8 ,80:7,7 , 70,3:/,.O3 , 90254 /0 ,8 4507,.4308 0803.,08
43974
!74.084/0,089O3/0.4393:/,//0304.4
8/3/2019 Iso 27002_2005
168/187
$0/0-07J,/08,774,72,390307:3574.084/0089O3/0,.4393:/,//0304.403,
47,3,.O36:097,9048706:07203948/080:7/,//0,31472,.O330.08,7485,7,,
.4393:/,//0304.4
43974
4393:/,//0304.4,3E88/025,.948
8/3/2019 Iso 27002_2005
169/187
;ffnnffnf
fffnf
;ff
fn,ff@ff
fnfffff%nff
@f
$0/0-07J,3/0391.,7480;039486:05:0/,3.,:8,739077:5.4308,48574.0848/0304.4
:394.43,574-,-/,/025,.94/0/.,839077:5.43088:8.4380.:03.,85,7,,80:7/,/
/031472,.O3
!48-08$4:.4308,0890.43974
43974
#0/,..O3025,39,.O3/05,308/0.4393:/,/
8/3/2019 Iso 27002_2005
170/187
$0 /0-07J,3 /08,774,7 0 25,39,7 5,308 /0 2,390320394 4 70.:507,.O3 /0 ,8 4507,.4308
/0 304.4 5,7, ,80:7,7 , /8543-/,/ /0 , 31472,.O3 03 0 7,/4 03 ,8 08.,,8 /0
90254 706:07/48 97,8 , 39077:5.O3 4 1,4 /0 48 574.0848 .7J9.48 /0 304.4
43974
,7.4/05,31.,.O35,7,,.4393:/,//0304.4
8/3/2019 Iso 27002_2005
171/187
$0 /0-07J, 2,390307 :3 086:02, 3.4 /0 5,308 /0 .4393:/,/ /0 304.4 5,7, ,7,39,7 6:0
/.48 5,308 843 .4388903908 5,7, 97,9,7 48 706:8948 /0 80:7/,/ 5,7, /0391.,7 ,8
5747/,/08 /0 57:0-, 2,390320394
43974
!7:0-,2,390320394700;,:,.O3/05,308/0.4393:/,/
8/3/2019 Iso 27002_2005
172/187
@fnJ9f@nf%9fn
ffffnnfnnnff
f
fnf
$0 /0-07J,3 574-,7 70:,720390 48 5,308 /0 .4393:/,/ /0 304.4 5,7, ,7,39,7 8:
,.9:,,.O3 01.,.,
!48-08$4:.4308,0890.43974
431472/,/
431472/,/.4348706:89480,08
8/3/2019 Iso 27002_2005
173/187
/0391.,.O3/0,08,.O3,5.,-0070.48/057450/,/3900.9:,!#$,;,:,7/,/0487089748/0,7,3,.O3!7490..O3/0/,948/0.,7E.907507843,/0,392/,//0,8507843,8;9,72,:84/048/85489;48/097,9,20394/0,31472,.O3#0,2039,.O3/048.4397408/0.17,/48
#0;84308/0,54J9.,/080:7/,//0,.431472/,/9F.3.,
431472/,/.43,54J9.,/080:7/,/42574-,.O3/0,.431472/,/9F.3.,
438/07,.430884-70,,:/947,/088902,8
4397408/0,:/947,/088902,8!7490..O3/0,8077,2039,8/0,:/947,/088902,8
431472/,/.4348706:89480,08
-09;4
8/3/2019 Iso 27002_2005
174/187
;9,7 3.:25203948 /0 .:,6:07 0 089,9:94 70:,.O3 : 4-,.O3 .4397,.9:, /0 .:,6:07706:894 /0 80:7/,/
!73.548
/80N4 4507,.O3 :84 089O3 /0 48 88902,8 /0 31472,.O3 5:0/03 807 4-094 /0
706:8948 089,9:9,748 70:,/4708 /0 80:7/,/ .4397,.9:,08
48 706:8948 0,08 0850.J1.48 /0-07J,3 807 ,/;079/48 547 48 ,8084708 0,08 /0 ,
47,3,.O3 4 547 57410843,08 ,/0.:,/,20390 .:,1.,/48
48 706:8948 6:0 2,7., , 08,.O3 .,2-,3 /0 :3 5,J8 , 4974 5:0/03 ;,7,7 5,7, ,
31472,.O3 6:0 80 0307, 03 :3 5,J8 80 97,38290 , 4974 5,J8 /89394 547 0 1:48 /0 /,948
03970 1743907,8
43974
/0391.,.O3/0,08,.O3,5.,-0
8/3/2019 Iso 27002_2005
175/187
fnfff fnffnf f%x
$$fn$fnf
If@f
n@nnnnff@ffn@nnf
$fnf9O9nfn
nnff
%4/48 48 706:8948 089,9:9,748 /0 70:,.O3 : 4-,.4308 .4397,.9:,08 700;,3908 ,8J .424
,8 ,..4308 /0 , 7,3,.O3 5,7, .:257 .43 08948 706:8948 /0-07J,3 807 05J.9,20390
/013/48 /4.:2039,/48 ,.9:,,/48 5,7, .,/, :34 /0 48 88902,8 /0 31472,.O3 ,
7,3,.O3
!48-08$4:.4308,0890.43974
43974
070.48/057450/,/3900.9:,!#
8/3/2019 Iso 27002_2005
176/187
, fffnnfnn nfffnf%x
$$f
nnfnffff
nfnfn%x hf$
,nfnfhnf$9f
hnf$
$0 /0-07J,3 25,39,7 574.0/203948 ,/0.:,/48 6:0 ,7,39.03 0 .:2520394 /0 , 08,.O3
70:,.4308 706:8948 .4397,.9:,08 5,7, 0 :84 /0 2,907, .43 548-08 /070.48 /0 57450/,/3900.9:, ,84.,/48 5,7, 0 :84 /0 574/:.948 8419,70 574509,74
!48-08$4:.4308,0890.43974
43974
fffffffn
8/3/2019 Iso 27002_2005
177/187
48 7089748 25479,3908 80 /0-07J,3 5749007 /0 , 5F7//, /0897:..O3 1,81.,.O3 /0
,.:07/4 , 48 706:8948 089,9:9,748 70:,.4308 .4397,.9:,08 /0 304.4
43974
!7490..O3/0/,948/0.,7E.907507843,/0,392/,//0,8507843,8
8/3/2019 Iso 27002_2005
178/187
fffnfff fffnf
ffnfff9nnffnfnnfnn
nfffnnf9
nfff9nnf
$0 /0-07J, ,7,39,7 , 57490..O3 57;,./,/ /0 48 /,948 803 706:07, , 08,.O3
70:,.4308 8 1:07,3 ,5.,-08 ,8 .E:8:,8 700;,3908 .4397,.9:,08
!48-08$4:.4308,0890.43974
43974
;9,72,:84/048/85489;48/097,9,20394/0,31472,.O3
8/3/2019 Iso 27002_2005
179/187
$0 /0-07J, /8:,/7 , 48 :8:,748 /0 :84 /0 48 70.:7848 /0/.,/48 , 97,9,20394 /0 ,
31472,.O3 5,7, 5745O8948 34 ,:947,/48
43974
f f n nf nf n fn fn
#0,2039,.O3/048.4397408/0.17,/48
8/3/2019 Iso 27002_2005
180/187
ffnfffnn ffffnn
ffnfnfJ nf,nff
@nnfn%,@
J
ffnnfnfnfnfn
!48-08$4:.4308,0890.43974
#0;84308/0,54J9.,/080:7/,//0,.431472/,/9F.3.,
-09;4
8/3/2019 Iso 27002_2005
181/187
,7,39,7 , .431472/,/ /0 48 88902,8 .43 ,8 54J9.,8 089E3/,708 /0 80:7/,/ /0 ,7,3,.O3
!73.548
$0 /0-07J,3 70,,7 70;84308 70:,708 /0 , 80:7/,/ /0 48 88902,8 /0 31472,.O3
,8 70;84308 80 /0-07J,3 70,,7 803 ,8 54J9.,8 /0 80:7/,/ ,5745,/,8 ,8 5,9,1472,8
9F.3.,8 88902,8 /0 31472,.O3 /0-07J,3 807 ,:/9,/48 5,7, 0 .:2520394 /0 48 089E3/,708
,/0.:,/48 /0 25,39,.O3 /0 , 80:7/,/ .4397408 /0 80:7/,/ /4.:2039,/48
431472/,/.43,54J9.,/080:7/,/
43974
n f ff n f
8/3/2019 Iso 27002_2005
182/187
nfffnfhfffffnnfnnhfnff
43974
$0 /0-07J, .42574-,7 70:,720390 , .431472/,/ /0 48 88902,8 /0 31472,.O3 .43 48
42574-,.O3/0,.431472/,/9F.3.,
8/3/2019 Iso 27002_2005
183/187
ffffnfn
nf
nf
$0 /0-07J, .42574-,7 70:,720390 , .431472/,/ /0 48 88902,8 /0 31472,.O3 .43 48
089E3/,708 /0 25,39,.O3 /0 , 80:7/,/
!48-08 $4:.4308 , 0890 .43974
438/07,.430884-70,,:/947J,/088902,8
-09;4
8/3/2019 Iso 27002_2005
184/187
,2,7 , 010.9;/,/ /0 574.084 /0 ,:/947J, /0 48 88902,8 /0 31472,.O3 232,7 ,83974284308 ,/08/0 F890 574.084
!73.548
0-07J,3 0897 .4397408 5,7, 5749007 48 88902,8 03 ,.9;4 ,8 077,2039,8 /0 ,:/947J,
/:7,390 0 /08,7744 /0 ,8 ,:/947J,8 /0 48 88902,8 /0 31472,.O3%,2-F3 80 706:070 , 57490..O3 5,7, 8,;,:,7/,7 , 3907/,/ 570;037 0 2, :84 /0 ,8
077,2039,8 /0 ,:/947J,
43974
$0 /0-07J,3 5,31.,7 ,.47/,7 .:/,/48,20390 48 706:8948 ,.9;/,/08 /0 ,:/947J, 6:0
4397408/0,:/947,/088902,8
8/3/2019 Iso 27002_2005
185/187
$0 /0-07J,3 5,31.,7 ,.47/,7 .:/,/48,20390 48 706:8948 ,.9;/,/08 /0 ,:/947J, 6:0
256:03 .42574-,.4308 03 48 88902,8 03 ,.9;4 .43 4-094 /0 232,7 0 7084 /0
39077:5.4308 /0 48 574.0848 /0 304.4
43974
$0 /0-07J,3 5749007 48 ,..0848 , ,8 077,2039,8 /0 ,:/947J, /0 48 88902,8 /0 31472,.O3
!7490..O3/0,8077,2039,8/0,:/947,/088902,8
8/3/2019 Iso 27002_2005
186/187
@fI$9@fnfnf f9nffnnf nfD
9nfn
If
9f@f
nnf,ffnnffffnnffffffff
fffffnffnnn
,
n f ff ffffff f f
ff%ffnfffn fnf n fn f
fff f ffn % fn f fn ffn ff
n f@@9 f fn9
9fffnff nfn
5
.43 4-094 /0 570;037 .:,6:07 548-0 2, :84 4 .42574284
!48-08$4:.4308,0890.43974
!7490..O3/0,8077,2039,8/0,:/947,/088902,8
8/3/2019 Iso 27002_2005
187/187
fn@fnffnfnffnfn
fn@fnfnfffffffffnnnf
fn@fn
fnnfnnffnffnfnffnf
ffnnfnffffn
,f
@-@JffI,ffnfnfnffffn
ffnfJf%fnnf%ff%nf@f
fnfDfffffnfffnffnfn
-
9 f J n f f 9