Security and resilience — Security management systems — Requirements

<p>This document specifies requirements for a security management system, including aspects relevant to the supply chain.</p> <p>This document is applicable to all types and sizes of organizations (e.g. commercial enterprises, government or other public agencies and non-profit organizations) which intend to establish, implement, maintain and improve a security management system. It provides a holistic and common approach and is not industry or sector specific.</p> <p>This document can be used throughout the life of the organization and can be applied to any activity, internal or external, at all levels.</p>