Skip to content
Please enter a keyword to search

  • CSA ISO/IEC TR 27008 : 2013 : R2017

    View superseded by
    Withdrawn A Withdrawn Standard is one, which is removed from sale, and its unique number can no longer be used. The Standard can be withdrawn and not replaced, or it can be withdrawn and replaced by a Standard with a different number.
    View superseded by

    INFORMATION TECHNOLOGY - SECURITY TECHNIQUES - GUIDELINES FOR AUDITORS ON INFORMATION SECURITY CONTROLS

    Available format(s):  Hardcopy, PDF

    Withdrawn date:  18-08-2021

    Language(s):  English

    Published date:  01-01-2017

    Publisher:  Canadian Standards Association

    Add To Cart

    Table of Contents - (Show below) - (Hide below)

    FOREWORD
    INTRODUCTION
    1 SCOPE
    2 NORMATIVE REFERENCES
    3 TERMS AND DEFINITIONS
    4 STRUCTURE OF THIS TECHNICAL REPORT
    5 BACKGROUND
    6 OVERVIEW OF INFORMATION SECURITY CONTROL
      REVIEWS
    7 REVIEW METHODS
    8 ACTIVITIES
    ANNEX A (INFORMATIVE) - TECHNICAL COMPLIANCE
            CHECKING PRACTICE GUIDE
    ANNEX B (INFORMATIVE) - INITIAL INFORMATION
            GATHERING (OTHER THAN IT)
    BIBLIOGRAPHY

    Abstract - (Show below) - (Hide below)

    Defines guidance on reviewing the implementation and operation of controls, including technical compliance checking of information system controls, in compliance with an organization's established information security standards.

    General Product Information - (Show below) - (Hide below)

    Committee ISO/IEC JTC 1
    Document Type Technical Report
    Product Note Reconfirmed EN
    Publisher Canadian Standards Association
    Status Withdrawn
    Superseded By
    Supersedes

    Standards Referencing This Book - (Show below) - (Hide below)

    ISO 19011:2011 Guidelines for auditing management systems
    ISO/IEC 27001:2013 Information technology — Security techniques — Information security management systems — Requirements
    ISO/IEC 27006:2015 Information technology — Security techniques — Requirements for bodies providing audit and certification of information security management systems
    ISO/IEC 27002:2013 Information technology Security techniques Code of practice for information security controls
    ISO/IEC 27005:2011 Information technology Security techniques Information security risk management
    ISO/IEC 27007:2017 Information technology Security techniques Guidelines for information security management systems auditing
    ISO/IEC 27000:2016 Information technology Security techniques Information security management systems Overview and vocabulary
    ISO Guide 73:2009 Risk management — Vocabulary
    View more information

    • Access your standards online with a subscription

      Features

      • Simple online access to standards, technical information and regulations
      • Critical updates of standards and customisable alerts and notifications
      • Multi - user online standards collection: secure, flexibile and cost effective