ISO/IEC 27009-2020 信息安全、网络安全和隐私保护--ISO/IEC 27001的具体应用--要求 Information security, cybersecurity and privacy protection — Sector- specific application of ISO/IEC 27001 — Requirements

This document specifies the requirements for creating sector-specific standards that extend　　
ISO/IEC 27001, and complement or amend ISO/IEC 27002 to support a specific sector (domain,
application area or market).
This document explains how to:
— include requirements in addition to those in ISO/IEC 27001,
— refine or interpret any of the ISO/IEC 27001 requirements,
— include controls in addition to those of ISO/IEC 27001:2013, Annex A and ISO/IEC 27002,
— modify any of the controls of ISO/IEC 27001:2013, Annex A and ISO/IEC 27002,
— add guidance to or modify the guidance of ISO/IEC 27002.
This document specifies that additional or refined requirements do not invalidate the requirements in
ISO/IEC 27001.
This document is applicable to those involved in producing sector-specific standards.nd edition 2020-04 Information security, cybersecurity and privacy protection — Sector- specific application of ISO/IEC 27001 — Requirements Sécurité de l'information, cybersécurité et protection des données personnelles — Application de l’ISO/IEC 27001 à un secteur spécifique — Exigences Reference number ISO/IEC 27009:2020(E) ？ ISO/IEC 2020 ISO/IEC 27009:2020(E) COPYRIGHT PROTECTED DO