ISO/IEC FDIS 29128-3 Information security, cybersecurity and privacy protection — Verification of cryptographic protocols Part 3: Evaluation methods and activities for protocol implementation verification

This document gives guidance on evaluating the implementation of a cryptographic protocol based on the framework provided in ISO/IEC 15408-4. This document specifies the required methods and activities to assess the conformance of a cryptographic protocol implementation to its ISO/IEC 29128-2 based formally verified protocol model. This document specifies assurance metrics for the integrated evaluation of both the cryptographic protocol and its implementation.

ITU-T X.dpidm-aAI: Terminology and design guidelines for Agentic AI identity management

1st revised baseline text for X.dpidm-aAI: Terminology and design guidelines for Agentic AI identity management

ITU-T 1ST Revised baseline text for XSTR.gidi : Globally Interoperable Digital Identity (including Humans/Enterprise/Non-Humans i.e. Agentic AI)

ITU-T SG17  (Study Period 2025)  Temporary Document  201-WP1

CACAO v2.0 empowers organisations to orchestrate, collaborate, and share cybersecurity playbooks. In the ongoing battle against threat actors, organizations must identify, create, document, and test various steps to detect, investigate, mitigate, and remedy potential threats. The culmination of these steps results in a cybersecurity playbook designed to secure organizational systems, networks, data, and users. This standard was published in November 2023.

In October 2026, this standard is revised for CACAO v3. This version is expected to make incident-response procedures easier to exchange, automate and reuse across tools and organisations. Clearer execution semantics can reduce inconsistent implementations and integration effort. For European SMEs, an open, vendor-neutral specification can lower development and market-entry barriers, enable reusable products and integrations, and reduce dependence on proprietary platforms. Wider adoption should help SOCs and CSIRTs coordinate responses more efficiently, strengthening the resilience of businesses and essential services and reducing the societal disruption caused by cyber incidents. 

ISO/IEC CD 29115.2Information security, cybersecurity and privacy protection – Entity authentication assurance framework

Will replace ISO/IEC 29115:2013

ISO/IEC 29115:2013 provides a framework for managing entity authentication assurance in a given context. In particular, it:

- specifies four levels of entity authentication assurance;

- specifies criteria and guidelines for achieving each of the four levels of entity authentication assurance;

- provides guidance for mapping other authentication assurance schemes to the four LoAs;

- provides guidance for exchanging the results of authentication that are based on the four LoAs; and

- provides guidance concerning controls that should be used to mitigate authentication threats.

The document provides requirements for implementing Human-to-Human Online Preventative Security (H2H-OPS), which complements ETSI TR 104 137 [i.1] 'Human-to-Human Online Preventative Security'. The principles included in the present document are secure by design, safety by design, and privacy by design. These are supported by annexes covering balancing the different requirements for Human-to-Human Online Preventative Security, demography, education and digital literacy. H2H-OPS is targeted at the operators, designers and service provides that have products, services and applications that allow users to post content online or to interact with each other. For example, social media networks, consumer file cloud storage and sharing sites, video-sharing platforms, online forums, dating services, video games with player-toplayer messaging, and online instant messaging services.