CSA ISO/IEC TR 27008 : 2013 : R2017
Withdrawn
A Withdrawn Standard is one, which is removed from sale, and its unique number can no longer be used. The Standard can be withdrawn and not replaced, or it can be withdrawn and replaced by a Standard with a different number.
View Superseded by
INFORMATION TECHNOLOGY - SECURITY TECHNIQUES - GUIDELINES FOR AUDITORS ON INFORMATION SECURITY CONTROLS
Hardcopy , PDF
18-08-2021
English
01-01-2017
Important note : Users cannot be edited or removed once added to your Multi user PDF.
FOREWORD
INTRODUCTION
1 SCOPE
2 NORMATIVE REFERENCES
3 TERMS AND DEFINITIONS
4 STRUCTURE OF THIS TECHNICAL REPORT
5 BACKGROUND
6 OVERVIEW OF INFORMATION SECURITY CONTROL
REVIEWS
7 REVIEW METHODS
8 ACTIVITIES
ANNEX A (INFORMATIVE) - TECHNICAL COMPLIANCE
CHECKING PRACTICE GUIDE
ANNEX B (INFORMATIVE) - INITIAL INFORMATION
GATHERING (OTHER THAN IT)
BIBLIOGRAPHY
Defines guidance on reviewing the implementation and operation of controls, including technical compliance checking of information system controls, in compliance with an organization's established information security standards.
| Committee |
ISO/IEC JTC 1
|
| DocumentType |
Technical Report
|
| ISBN |
978-1-77139-060-6
|
| Pages |
54
|
| ProductNote |
Reconfirmed EN
|
| PublisherName |
Canadian Standards Association
|
| Status |
Withdrawn
|
| SupersededBy | |
| Supersedes |
| Standards | Relationship |
| ISO/IEC TR 27008:2011 | Identical |
| ISO 19011:2011 | Guidelines for auditing management systems |
| ISO/IEC 27001:2013 | Information technology — Security techniques — Information security management systems — Requirements |
| ISO/IEC 27006:2015 | Information technology — Security techniques — Requirements for bodies providing audit and certification of information security management systems |
| ISO/IEC 27002:2013 | Information technology Security techniques Code of practice for information security controls |
| ISO/IEC 27005:2011 | Information technology Security techniques Information security risk management |
| ISO/IEC 27007:2017 | Information technology Security techniques Guidelines for information security management systems auditing |
| ISO/IEC 27000:2016 | Information technology Security techniques Information security management systems Overview and vocabulary |
| ISO Guide 73:2009 | Risk management — Vocabulary |
Access your standards online with a subscription
Features
-
Simple online access to standards, technical information and regulations.
-
Critical updates of standards and customisable alerts and notifications.
-
Multi-user online standards collection: secure, flexible and cost effective.