GB/T 38631-2020 (English Version) PDF

Scope: This standard specifies the requirements when GB/T 22080 is applied to specific industries (fields, applications). This standard explains how to include supplementary requirements on the requirements of GB/T 22080, how to refine the requirements of GB/T 22080, and how to include controls or control sets other than Appendix A of GB/T 22080-2016. This standard ensures that the supplementary or detailed requirements do not conflict with the requirements of GB/T 22080. This standard applies to the formulation of specific industry standards related to GB/T22080. {Contains: statement of scope of application, which includes the relationship between this standard and GB/T22080 and GB/T22081. } This standard specifies the supplementary, detailed and interpretive requirements for GB/T 22080 applied to the medical industry, as well as the supplementary and modified guidelines for GB/T 22081 applied to the medical industry. This standard is suitable for the medical industry to construct an information security management system that includes its specific requirements.

GB/T 38631-2020 Referenced Document

GB/T 22080-2016 Information technology.Security techniques.Information security management systems.Requirements
GB/T 22081-2016 Information Technology—Security Techniques—Code ofpractice for information security controls
GB/T 29246-2017 Information technology—Security techniques—Information security management systems—Overview and vocabulary

2020 GB/T 38631-2020 Information technology—Security techniques—Sector-specific application of GB/T 22080—Requirements