iso iec 13335-1 concepts and models for it security

《iso iec 13335-1 concepts and models for it security》由会员上传分享，免费在线阅读，更多相关内容在应用文档-天天文库。

1、ISO/IECTR13335-11996-12-15Informationtechnology—GuidelinesforthemanagementofITSecurity—Part1:ConceptsandModelsforITSecurity27ContentsForewordIntroduction1.Scope2.Reference3.Definitions4.Structure5.Aim6.Background7.ConceptsfortheManagementofITSecurity7.1Approach7.

2、3Objectives,StrategiesandPolicies8.SecurityElements8.1Assets8.3Threats8.3Vulnerabilities8.4Impact8.5Risk8.6Safeguards8.7ResidualRisk8.8Constraints9.ProcessesfortheManagementofITSecurity9.1ConfigurationManagement9.2ChangeManagement9.3RiskManagement9.4RiskAnalysis9

3、.5Accountability9.6SecurityAwareness9.7Monitoring9.8ContingencyPlansandDisasterRecovery10.Models11.Summary27ForewordISO(theInternationalOrganizationforStandardization)andIEC(theInternationalElectrotechnicalCommission)formthespecializedsystemforworldwidestandardiz

4、ation.NationalbodiesthataremembersofISOorIECparticipateinthedevelopmentofInternationalStandardsthroughtechnicalcommitteesestablishedbytherespectiveorganizationtodealwithparticularfieldsoftechnicalactivity.ISOandIECtechnicalcommitteescollaborateinfieldsofmutualint

5、erest.Otherinternationalorganizations,governmentalandnon-governmental,inliaisonwithISOandIEC,alsotakepartinthework.Inthefieldofinformationtechnology,ISOandIEChaveestablishedajointtechnicalcommittee,ISO/IECJTC1.ThemaintaskoftechnicalcommitteesistoprepareInternatio

6、nalStandards,butinexceptionalcircumstancesatechnicalcommitteemayproposethepublicationofaTechnicalReportofoneofthefollowingtypes:–type1,whentherequiredsupportcannotbeobtainedforthepublicationofanInternationalStandard,despiterepeatedefforts;–type2,whenthesubjectiss

7、tillundertechnicaldevelopmentorwhereforanyotherreasonthereisthefuturebutnotimmediatepossibilityofanagreementonanInternationalStandard;–type3,whenatechnicalcommitteehascollecteddataofadifferentkindfromthatwhichisnormallypublishedasanInternationalStandard("stateoft

8、heart",forexample).Technicalreportsoftypes1and2aresubjecttoreviewwithinthreeyearsofpublication,todecidewhethertheycanbetransformedintoInternationalStandards.Te