(b) Responsibility. Participants are responsible for the security of information systems and networks in a manner appropriate to their individual roles. They should review their own policies, practices, measures and procedures regularly, and should assess whether they are appropriate to their environment;
(b) 责任。参与者应以适合其个别角色的方式对信息系统和网络的安全负责。他们应定期审查各自的政策、惯例、措施和程序，并评估这些政策、惯例、措施和程序是否与其环境相称；