(The understanding of GBT22081-2008 effective rules for information security management is very helpful to the understanding of the norm, especially the understanding of the appendix
GBT22081-2008 Effective Rules for Information Security Management.pdf)