17/30355373 DC : 0
Superseded
A superseded Standard is one, which is fully replaced by another Standard, which is a new edition of the same Standard.
BS ISO/IEC 27019 - INFORMATION TECHNOLOGY - SECURITY TECHNIQUES - INFORMATION SECURITY CONTROLS FOR THE ENERGY UTILITY INDUSTRY
Hardcopy , PDF
30-11-2017
English
Foreword
0 Introduction
1 Scope
2 Normative references
3 Terms and definitions
4 Energy utility industry specific requirements related
to ISO/IEC 27001
5 Energy utility industry specific guidance related to
ISO/IEC 27002:2013
ENR 5 Information security policies
ENR 6 Organization of information security
ENR 7 Human resource security
ENR 8 Asset management
ENR 9 Access control
ENR 10 Cryptography
ENR 11 Physical and environmental security
ENR 12 Operations security
ENR 13 Communications security
ENR 14 System acquisition, development
and maintenance
ENR 15 Supplier relationships
ENR 16 Information security incident management
ENR 17 Information security aspects of business
continuity management
ENR 18 Compliance
Annex A (Normative) - Energy utility industry specific
reference control objectives and controls
Bibliography
BS ISO/IEC 27019.
Committee |
IST/33/1
|
DocumentType |
Draft
|
Pages |
50
|
PublisherName |
British Standards Institution
|
Status |
Superseded
|
ISO/IEC 27001:2013 | Information technology — Security techniques — Information security management systems — Requirements |
IEC TS 62443-1-1:2009 | Industrial communication networks - Network and system security - Part 1-1: Terminology, concepts and models |
ISO/IEC 27002:2013 | Information technology Security techniques Code of practice for information security controls |
ISO/IEC 27000:2016 | Information technology Security techniques Information security management systems Overview and vocabulary |
IEC TS 62351-8:2011 | Power systems management and associated information exchange - Data and communications security - Part 8: Role-based access control |
Access your standards online with a subscription
Features
-
Simple online access to standards, technical information and regulations.
-
Critical updates of standards and customisable alerts and notifications.
-
Multi-user online standards collection: secure, flexible and cost effective.