• INCITS/ISO/IEC 27013 : 2014

    Current The latest, up-to-date edition.

    INFORMATION TECHNOLOGY - SECURITY TECHNIQUES - GUIDANCE ON THE INTEGRATED IMPLEMENTATION OF ISO/IEC 27001 AND ISO/IEC 20000-1

    Available format(s):  Hardcopy, PDF

    Language(s):  English

    Published date:  01-01-2014

    Publisher:  Information Technology Industry Council

    Add To Cart

    Table of Contents - (Show below) - (Hide below)

    Foreword
    Introduction
    1 Scope
    2 Normative references
    3 Terms, abbreviated terms and definitions
    4 Overviews of ISO/IEC 27001 and ISO/IEC 20000-1
    5 Approaches for integrated implementation
    6 Integrated implementation considerations
    Annex A (informative) - Correspondence between
            ISO/IEC 27001:2005 and ISO/IEC 20000-1:2011
    Annex B (informative) - Comparison of ISO/IEC 27000:2009
            and ISO/IEC 20000-1:2011 terms
    Bibliography

    Abstract - (Show below) - (Hide below)

    Gives guidance on the integrated implementation of ISO/IEC 27001 and ISO/IEC 20000-1 for those organizations which are intending to either.

    General Product Information - (Show below) - (Hide below)

    Document Type Standard
    Publisher Information Technology Industry Council
    Status Current

    Standards Referencing This Book - (Show below) - (Hide below)

    ISO/IEC TR 20000-5:2013 Information technology Service management Part 5: Exemplar implementation plan for ISO/IEC 20000-1
    ISO 19011:2011 Guidelines for auditing management systems
    ISO/IEC 27001:2013 Information technology — Security techniques — Information security management systems — Requirements
    ISO/IEC TR 90006:2013 Information technology Guidelines for the application of ISO 9001:2008 to IT service management and its integration with ISO/IEC 20000-1:2011
    ISO/IEC 27003:2017 Information technology — Security techniques — Information security management systems — Guidance
    ISO/IEC 27004:2016 Information technology — Security techniques — Information security management — Monitoring, measurement, analysis and evaluation
    ISO 31000:2009 Risk management Principles and guidelines
    ISO/IEC 27006:2015 Information technology — Security techniques — Requirements for bodies providing audit and certification of information security management systems
    ISO/IEC 27014:2013 Information technology Security techniques Governance of information security
    ISO/IEC 27002:2013 Information technology Security techniques Code of practice for information security controls
    ISO/IEC TR 20000-4:2010 Information technology Service management Part 4: Process reference model
    ISO/IEC 27010:2015 Information technology Security techniques Information security management for inter-sector and inter-organizational communications
    ISO/IEC 20000-1:2011 Information technology Service management Part 1: Service management system requirements
    ISO/IEC 20000-2:2012 Information technology Service management Part 2: Guidance on the application of service management systems
    ISO 9004:2009 Managing for the sustained success of an organization A quality management approach
    ISO/IEC 20000-3:2012 Information technology Service management Part 3: Guidance on scope definition and applicability of ISO/IEC 20000-1
    ISO/IEC 27005:2011 Information technology Security techniques Information security risk management
    ISO 9000:2015 Quality management systems — Fundamentals and vocabulary
    ISO/IEC TR 27008:2011 Information technology Security techniques Guidelines for auditors on information security controls
    ISO/IEC TS 15504-8:2012 Information technology Process assessment Part 8: An exemplar process assessment model for IT service management
    ISO/IEC 27007:2017 Information technology Security techniques Guidelines for information security management systems auditing
    ISO/IEC 27000:2016 Information technology Security techniques Information security management systems Overview and vocabulary
    • Access your standards online with a subscription

      Features

      • Simple online access to standards, technical information and regulations
      • Critical updates of standards and customisable alerts and notifications
      • Multi - user online standards collection: secure, flexibile and cost effective