• CAN/CSA-ISO/IEC 15026-3:16

    Current The latest, up-to-date edition.

    Systems and software engineering - Systems and software assurance - Part 3: System integrity levels (Adopted ISO/IEC 15026-3:2015, second edition, 2015-12-01)

    Available format(s):  Hardcopy, PDF

    Language(s):  English

    Published date:  01-01-2016

    Publisher:  Canadian Standards Association

    Add To Cart

    Table of Contents - (Show below) - (Hide below)

    Foreword
    1 Scope
    2 Normative references
    3 Terms and definitions
    4 Defining integrity levels
    5 Using integrity levels
    6 System integrity level determination
    7 Assigning system element integrity levels
    8 Meeting integrity level requirements
    9 Agreement and approval authorities
    Annex A (informative) - An example of use of ISO/IEC 15026-3
    Bibliography

    Abstract - (Show below) - (Hide below)

    Defines the concept of integrity levels with corresponding integrity level requirements that are required to be met in order to show the achievement of the integrity level.

    Scope - (Show below) - (Hide below)

    Preface Standards development within the Information Technology sector is harmonized with international standards development. Through the CSA Technical Committee on Information Technology (TCIT), Canadians serve as the SCC Mirror Committee (SMC) on ISO/IEC Joint Technical Committee 1 on Information Technology (ISO/IEC JTC1) for the Standards Council of Canada (SCC), the ISO member body for Canada and sponsor of the Canadian National Committee of the IEC. Also, as a member of the International Telecommunication Union (ITU), Canada participates in the International Telegraph and Telephone Consultative Committee (ITU-T). For brevity, this Standard will be referred to as \"CAN/CSA-ISO/IEC 15026-3\" throughout. This Standard supersedes CAN/CSA-ISO/IEC 15026-3:13 (adopted ISO/IEC 15026-3:2011). At the time of publication, ISO/IEC 15026-3:2015 is available from ISO and IEC in English only. CSA Group will publish the French version when it becomes available from ISO and IEC. Scope This part of ISO/IEC 15026 specifies the concept of integrity levels with corresponding integrity level requirements that are required to be met in order to show the achievement of the integrity level. It places requirements on and recommends methods for defining and using integrity levels and their corresponding integrity level requirements. It covers systems, software products, and their elements, as well as relevant external dependences. This part of ISO/IEC 15026 is applicable to systems and software and is intended for use by the following: a) definers of integrity levels such as industry and professional organizations, standards organizations, and government agencies; b) users of integrity levels such as developers and maintainers, suppliers and acquirers, system or software users, assessors of systems or software and administrative and technical support staff of systems and/or software products. One important use of integrity levels is by suppliers and acquirers in agreements; for example, to aid in assuring safety, financial, or security characteristics of a delivered system or product. This part of ISO/IEC 15026 does not prescribe a specific set of integrity levels or their integrity level requirements. In addition, it does not prescribe the way in which integrity level use is integrated with the overall system or software engineering life cycle processes. It does, however, provide an example of use of this part of ISO/IEC 15026 in Annex A.

    General Product Information - (Show below) - (Hide below)

    Development Note Supersedes CSA ISO/IEC 15026. (05/2013)
    Document Type Standard
    Publisher Canadian Standards Association
    Status Current
    Supersedes

    Standards Referencing This Book - (Show below) - (Hide below)

    ISO/IEC/IEEE 15288:2015 Systems and software engineering — System life cycle processes
    ISO/IEC 25010:2011 Systems and software engineering — Systems and software Quality Requirements and Evaluation (SQuaRE) — System and software quality models
    ISO 31000:2009 Risk management Principles and guidelines
    ISO/IEC 15026-1:2013 Systems and software engineering Systems and software assurance Part 1: Concepts and vocabulary
    ISO/IEC Guide 51:2014 Safety aspects Guidelines for their inclusion in standards
    ISO/IEC 16085:2006 Systems and software engineering Life cycle processes Risk management
    ISO/IEC 12207:2008 Systems and software engineering Software life cycle processes
    ISO/IEC 15408-1:2009 Information technology — Security techniques — Evaluation criteria for IT security — Part 1: Introduction and general model
    ISO 26262-10:2012 Road vehicles Functional safety Part 10: Guideline on ISO 26262
    ISO 14971:2007 Medical devices Application of risk management to medical devices
    ISO Guide 73:2009 Risk management — Vocabulary
    • Access your standards online with a subscription

      Features

      • Simple online access to standards, technical information and regulations
      • Critical updates of standards and customisable alerts and notifications
      • Multi - user online standards collection: secure, flexibile and cost effective