47上一句的规定是specify，这里的规定是set out，有陈述、罗列的意思。这两个词沿用了GB丌22080-'2008／ISO/IEC27001: 2005中的翻译。

48英文原文中加了下划线，此处保持统一。

49这段客套话，表述略有区别，ISO/IEC 27001：2013：The following documents, in whole or in part, are normatively refer -

enced in this document and are indispensable for its application. For dated references, only the edition cited applies. For undated references，the latest edition of the referenced document (including any amendments) applies.在ISO/IEC 27001：2005描述如下；The following referenced documents are indispensable for the application of this document. For dated references,only the edition cited applies. For undated references, the latest edition of the referenced document (including any amendments) applies. 国家标准的描述都是一致的，显然与英文不尽相同。在这个形式问题上，国家标准比国际标准更规范。

50这个是没有标注年号的标准。目前这个标准有中文版本：GB/T 29246-2012／ISO/IEC 27000: 2009信息技术安全技术信息安全管理体系概述和词汇。

研可以购买该标准的中文版.或者参考：谢宗晓编著，《信息安全管理体系实施指南》，中国标准出版社。