| 密级 | classification level |
| 风险评估管理制度 | Risk Assessment and Management System |
| 信息安全管理委员会 | Information Security Management Committee |
| 审核（员） | reviewer |
| 适用范围 | scope of application |
| 资产价值 | asset value |
| 风险识别 | risk identification |
| 风险评价 | risk evaluation |
| 风险处置 | risk management |
| 残余风险 | residual risk |
| 信息安全风险评估 | Information Security Risk Assessment |
| 业务相关性 | operational relevance |
| 风险等级 | risk grade |
| 计算方法 | calculating methods |
| 数据安全管理委员会 | Data Security Management Committee |
| 可接受风险 | acceptable risks |
| 风险处置计划 | risk management plans |
| 管理者代表 | The management representative |
| 风险责任部门 | departments responsible for risks |
| 风险责任人 | the person responsible for the risk management |
| 风险应对 | risk response |
| 风险整改 | risk rectification |
| 文件与记录管理制度 | Documents and Records Management System |
| 版本控制 | version control |
| 体系文件 | system documents |
| 策略文件 | policy file |
| 控制域 | control domain |
| 过程方法 | process approach |
| 记录信息 | log information |
| 文件编制 | document preparation |
| 变更管理计划 | Change Management Plan |
| 变更管理程序 | Change Management Process |
| 产品规格说明书 | Product Specifications |
| 配置管理员 | configuration manager |
| 安全经理 | security manager |
| 开发负责人 | development director |
| 重大变更 | major change |
| 一般变更 | ordinary change |
| 日常变更 | everyday change |
| 变更申请表 | Change Request Form |
| 变更实施 | change implementation |
| 验证结果 | verification conclusion |
| 负责人 | responsible person |
| 压力指针 | pressure gauge needle |
| 安全插销 | safety pin |
| 瓶体 | cylinder |
| 纠正措施 | corrective actions |
| 不符合项 | non-conformities |
| 管理评审 | management reviews |
| 不期望情况 | undesired situations |
| 预防措施 | preventive actions |
| 信息安全事件 | information security incident |
| 有效性测量 | effectiveness measurement |
| 不符合报告 | non-conformance report |
| 管理者代表 | management representative |
| 认证机构 | the Certification Body |
| 安全异常 | security incident |
| 问题等级 | Issue Severity |
| 问题分类 | Classification of Issues |
| 判定条件 | Criteria for Determination |
| 处理原则 | Handling Principles |
| 数据等级 | Data Level |
| 安全保障等级 | Safety Level |
| 生命周期 | Life Cycle |
| 数据销毁 | Data Destruction |
| 数据安全委员会 | Data Security Committee |
| 裁剪 | tailoring |
| 安全生命周期 | safety lifecycle |
| 功能安全 | functional safety |
| 质量总监 | director of quality |
| 人员安全管理制度 | Personnel Security Management System |
| 入职安全管理 | onboarding security management |
| 在职安全管理 | in-service security management |
| 外包人员 | outsourced personnel |
| 保密协议 | confidentiality agreement |
| 员工手册 | the "Employee Handbook" |
| 信息资产管理制度 | Information Asset Security Management System |
| 信息资产责任人 | information asset owner |
| 安全隐患 | security risk |
| 安全事件 | security incident |
| 数据备份 | data backups |
| 源代码 | source codes |
| 主机 | host |
| 信息资产识别 | information asset identification |
| 信息资产处置 | information asset disposal |
| 信息资产迁移 | information asset migration |
| 信息资产报废 | information asset scrapping |
| 数据加密 | data encryption |
| 数据分类分级管理 | Data Categorization and Classification Management |
| 数据产生 | data creation |
| 数据存储 | data storage |
| 数据使用 | data usage |
| 数据传输 | data transmission |
| 数据脱敏 | data masking |
| 数据所有者 | Data Owner |
| 数据管理者 | Data Steward |
| 数据使用者 | Data User |
| 数据机密性 | data confidentiality |
| 交互方式 | interaction methods |
| 数据传输加密 | data transmission encryption |
| 网络安全区域 | network security zone |
| 传输链路 | transmission link |
| 摄像头数据 | Camera Data |
| 用户状态监测 | User Status Monitoring |
| 人机交互操作记录 | Human-Machine Interaction Operation Records |
| 数据保留期限 | data retention durations |
| 最小保存期限 | minimal retention periods |
| 数据销毁 | secure data deletion |
| 灭火器检查卡 | Fire Extinguisher Inspection Checklist |
| 门禁系统 | access control system |
| 消防设备控制柜 | fire equipment control cabinet |
| 视频监控系统 | video surveillance system |
| 财务部门 | finance department |
| 采购部门 | purchasing department |
| 数据安全检查 | data security check |
| 用户认证功能 | user identification function |
| 鉴权 | authenticate |
| 数据字段 | data field |
| 风险处置策略 | risk management strategy |
| 数据安全委员会 | Data Security Committee |
| 安全域 | security domain |
| 数据分类分级指南 | "Data Categorization and Classification Guide" |
| 日志记录策略 | log recording policies |
| 角色活动系统 | the role-activity system |
| 信息安全 | information security |
| 产品开发生命周期 | product development life cycle |
| 系统漏洞 | system vulnerability |
| 供应商 | supplier |
| 安全合规团队 | security compliance team |
