ISO/DIS 24946 Blockchain and distributed ledger technologies — Requirements and guidance for establishing, improving, preserving, and assessing the privacy capability of DLT systems: The document specifies DLT related requirements for establishing, improving, preserving, and assessing the privacy capability of DLT systems.
ISO/IEC 27033-1:2015 provides an overview of network security and related definitions. It defines and describes the concepts associated with, and provides management guidance on, network security. (Network security applies to the security of devices, security of management activities related to the devices, applications/services, and end-users, in addition to security of the information being transferred across the communication links.)
It is relevant to anyone involved in owning, operating or using a network. This includes senior managers and other non-technical managers or users, in addition to managers and administrators who have specific responsibilities for information security and/or network security, network operation, or who are responsible for an organization's overall security program and security policy development. It is also relevant to anyone involved in the planning, design and implementation of the architectural aspects of network security.
ISO/IEC 27033-1:2015 also includes the following:
- provides guidance on how to identify and analyse network security risks and the definition of network security requirements based on that analysis,
- provides an overview of the controls that support network technical security architectures and related technical controls, as well as those non-technical controls and technical controls that are applicable not just to networks,
- introduces how to achieve good quality network technical security architectures, and the risk, design and control aspects associated with typical network scenarios and network "technology" areas (which are dealt with in detail in subsequent parts of ISO/IEC 27033), and briefly addresses the issues associated with implementing and operating network security controls, and the on-going monitoring and reviewing of their implementation.
Overall, it provides an overview of this International Standard and a "road map" to all other parts.
ISO/IEC 27004:2016 provides guidelines intended to assist organizations in evaluating the information security performance and the effectiveness of an information security management system in order to fulfil the requirements of ISO/IEC 27001:2013, 9.1. It establishes:
a) the monitoring and measurement of information security performance;
b) the monitoring and measurement of the effectiveness of an information security management system (ISMS) including its processes and controls;
c) the analysis and evaluation of the results of monitoring and measurement.
ISO/IEC 27004:2016 is applicable to all types and sizes of organizations.
This document provides a guidance for organizations to address security and privacy risks in digital twin systems. The guidance in this document helps organizations identify security and privacy risks throughout the digital twin systems lifecycles system lifecycle, and establishes mechanisms to evaluate the consequences of such risks and treat risks them. This document is applicable to all types and sizes of organizations, including public and private companies, government entities, academia, research institutions and not-for- profit organizations, that develop or use digital twin systems.
This document provides guidance on the use of information security control attributes. The guidance given in this document is generic and is intended to be applicable to all organizations, regardless of type, size, or nature.
ISO/IEC 27003:2017 provides explanation and guidance on ISO/IEC 27001:2013. ISO/IEC 27001:2013 specifies the requirements for establishing, implementing, maintaining and continually improving an information security management system within the context of the organization. It also includes requirements for the assessment and treatment of information security risks tailored to the needs of the organization. The requirements set out in ISO/IEC 27001:2013 are generic and are intended to be applicable to all organizations, regardless of type, size or nature.
ISO/IEC 27001 is the world's best-known standard for information security management systems (ISMS). It defines requirements an ISMS must meet.
The ISO/IEC 27001 standard provides companies of any size and from all sectors of activity with guidance for establishing, implementing, maintaining and continually improving an information security management system.
Conformity with ISO/IEC 27001 means that an organization or business has put in place a system to manage risks related to the security of data owned or handled by the company, and that this system respects all the best practices and principles enshrined in this International Standard.
With cyber-crime on the rise and new threats constantly emerging, it can seem difficult or even impossible to manage cyber-risks. ISO/IEC 27001 helps organizations become risk-aware and proactively identify and address weaknesses.
ISO/IEC 27001 promotes a holistic approach to information security: vetting people, policies and technology. An information security management system implemented according to this standard is a tool for risk management, cyber-resilience and operational excellence
This standard will provide the means (e.g., APIs) for a decentralized media rights ecosystem based on widely deployed MPEG technologies (e.g., audio-visual codecs, file formats, streaming protocols, and smart contracts) and non-MPEG technologies (e.g., DLTs, content and creator IDs).
This document provides terminology, concepts, requirements, and guidance for logging of AI systems. It is primarily intended for organizations placing on the market or putting into service AI systems and is not specific to any particular secto
Draft under development
This standard offers practical guidance on integrating health and wellbeing into community development efforts, with a specific focus on aligning with ISO 37101's sustainability goals. It is designed to help local governments, organizations, and communities implement strategies focused on health, that promote wellbeing, physical, mental, social, and environmental health aspects. The scope of the standard covers the entire lifecycle of health and wellbeing management, from policy development to continuous improvement. It provides a framework for establishing health-promoting policies, ensuring that health considerations are embedded in community planning, governance, and urban design. By applying the standard, organizations and communities can develop strategies for creating environments that foster both mental and physical health, reduce health disparities, and improve the quality of life for all residents. This standard emphasizes the importance of urban planning and infrastructure, encouraging access to green spaces, recreational facilities, clean water, and safe environments, all of which are essential for health. Very significantly, it integrates with the 12 key areas of action outlined in ISO 37101, such as governance, education, and community infrastructure, ensuring that health and wellbeing are considered across all sectors of development. The standard provides guidance on planning and implementing initiatives tailored to local needs, using evidence-based approaches to tackle health challenges. Ultimately, the scope is about creating a holistic approach to health and wellbeing that aligns with sustainable development principles. By offering actionable steps for integration, monitoring, and evaluation, the standard empowers communities to create healthier, more resilient environments that support long-term wellbeing for current and future generations.
This document specifies the requirements for establishing, implementing, maintaining and continually improving a circular economy management system that an organization can use to enhance its circularity performance. The document is intended for use by an organization seeking to integrate circular economy as a strategic priority. The circular economy management system will support the organization to use a systemic approach to contribute to the maintenance of a circular flow of resources in society by recovering, retaining or adding to their value, while contributing to sustainable development. The requirements set out in this document is generic and will provide value for the society, the environment, the organization itself and interested parties. The document will support an organisation to understand how its value network (e.g. suppliers and customers) will be affected by decisions taken by the organisation and give organizations within the value network a system of interconnected and interdependent decisions and activities. Consistent with the organization's policy for a circular economy, the expected results of a circular economy management system include: • enhancement of the circularity performance. • a system for compliance obligations. • a system for achievement of environmental, social, and economic objectives. • increased long-term value creation. This document is applicable to any organization seeking to understand and commit or contribute to a circular economy. These organizations can be either private or public, acting individually or collectively, regardless of type or size, and located in any jurisdiction, or position within a specific value chain or value network. This document can be used in whole or in part to systematically improve management towards circularity. Claims of conformity to this International Standard, however, are not acceptable unless all its requirements are incorporated into an organization's management system and fulfilled without exclusion.