CSA TELECOM ORGANIZATIONS PACKAGE : 2018

CAN/CSA-ISO/IEC 27000: Information technology - Security
 techniques - Information security management systems -
 Overview and vocabulary
Foreword
0 Introduction
1 Scope
2 Terms and definitions
3 Information security management systems
4 ISMS family of standards
Annex A (informative) - Verbal forms for the expression of
        provisions
Annex B (informative) - Term and term ownership
Bibliography
CAN/CSA-ISO/IEC 27001: Information technology - Security
 techniques - Information security management systems -
 Requirements
Foreword
0 Introduction
1 Scope
2 Normative references
3 Terms and definitions
4 Context of the organization
5 Leadership
6 Planning
7 Support
8 Operation
9 Performance evaluation
10 Improvement
Annex A (normative) - Reference control objectives and
        controls
Bibliography
CAN/CSA-ISO/IEC 27002: Information technology - Security
 techniques - Code of practice for information security
 controls
Foreword
0 Introduction
1 Scope
2 Normative references
3 Terms and definitions
4 Structure of this standard
5 Information security policies
6 Organization of information security
7 Human resource security
8 Asset management
9 Access control
10 Cryptography
11 Physical and environmental security
12 Operations security
13 Communications security
14 System acquisition, development and maintenance
15 Supplier relationships
16 Information security incident management
17 Information security aspects of business continuity
   management
18 Compliance
Bibliography
CAN/CSA-ISO/IEC 27003: Information technology - Security
 techniques - Information security management system
 implementation guidance
Foreword
Introduction
1 Scope
2 Normative references
3 Terms and definitions
4 Structure of this International Standard
5 Obtaining management approval for initiating an ISMS
  project
6 Defining ISMS scope, boundaries and ISMS policy
7 Conducting information security requirements analysis
8 Conducting risk assessment and planning risk treatment
9 Designing the ISMS
Annex A (informative) - Checklist description
Annex B (informative) - Roles and responsibilities for Information
        Security
Annex C (informative) - Information about Internal Auditing
Annex D (informative) - Structure of policies
Annex E (informative) - Monitoring and measuring
Bibliography
CAN/CSA-ISO/IEC 27004: Information technology - Security
 techniques - Information security management - Monitoring,
 measurement, analysis and evaluation
Foreword
Introduction
1 Scope
2 Normative references
3 Terms and definitions
4 Structure and overview
5 Rationale
6 Characteristics
7 Types of measures
8 Processes
Annex A (informative) - An information security measurement
        model
Annex B (informative) - Measurement construct examples
Annex C (informative) - An example of free-text form
        measurement construction
Bibliography
CAN/CSA-ISO/IEC 27005: Information technology - Security
 techniques - Information security risk management
Foreword
Introduction
1 Scope
2 Normative references
3 Terms and definitions
4 Structure of this International Standard
5 Background
6 Overview of the information security risk management
   process
7 Context establishment
8 Information security risk assessment
9 Information security risk treatment
10 Information security risk acceptance
11 Information security risk communication and consultation
12 Information security risk monitoring and review
Annex A (informative) - Defining the scope and boundaries
        of the information security risk management process
Annex B (informative) - Identification and valuation of assets
        and impact assessment
Annex C (informative) - Examples of typical threats
Annex D (informative) - Vulnerabilities and methods for
        vulnerability assessment
Annex E (informative) - Information security risk assessment
        approaches
Annex F (informative) - Constraints for risk modification
Annex G (informative) - Differences in definitions between
        ISO/IEC 27005:2008 and ISO/IEC 27005:2011
Bibliography
CAN/CSA-ISO/IEC 27011: Information technology - Security
 techniques - Code of practice for Information security
 controls based on ISO/IEC 27002 for telecommunications
 organizations
1 Scope
2 Normative references
3 Definitions and abbreviations
4 Overview
5 Information security policies
6 Organization of information security
7 Human resource security
8 Asset management
9 Access control
10 Cryptography
11 Physical and environmental security
12 Operations security
13 Communications security
14 System acquisition, development and maintenance
15 Supplier relationships
16 Information security incident management
17 Information security aspects of business continuity
   management
18 Compliance
Annex A - Telecommunications extended control set
Annex B - Additional guidance for network security
Bibliography

Contains: CAN/CSA-ISO/IEC 27000:18, Information technology - Security techniques - Information security management systems - Overview and vocabulary; CAN/CSA-ISO/IEC 27001:14, Information technology - Security techniques - Information security management systems - Requirements; CAN/CSA-ISO/IEC 27002:15, Information technology - Security techniques - Code of practice for information security controls; CAN/CSA-ISO/IEC 27003:10, Information technology - Security techniques - Information security management system implementation guidance; CAN/CSA-ISO/IEC 27004:18, Information technology - Security techniques - Information security management - Monitoring, measurement, analysis and evaluation; CAN/CSA-ISO/IEC 27005:11, Information technology - Security techniques - Information security risk management; and CAN/CSA-ISO/IEC 27011:18, Information technology - Security techniques - Code of practice for Information security controls based on ISO/IEC 27002 for telecommunications organizations.