(Common Criteria) uses PP and ST to determine security levels, rated EAL 1-7. - ISO 15408-1:2009, requirements and Guidance for organizations conducting security operations. - ISO 18788, requirements for service management systems. - ISO 20000-1, Enhancing resilience through business continuity management system. - ISO 22301:2019, Global framework for information security practices. - ISO 27000 series, Focus on resilient supply chain security. - ISO 27000:2022, Defines ISMS requirements - ISO 27001, ISO 27001-based guidelines for security controls. - ISO 27002, Standard for security controls for cloud environments, Builds on 27002. - ISO/IEC 27017, Cloud providers acting as data processors/Cloud PII protection - ISO/IEC 27018, Guidelines for incident management readiness. - ISO 27035, guidance on Managing cybersecurity risk in supplier relationships. - ISO 27036, Standard for e-Discovery. - ISO 27050, Guidelines for managing privacy in PII processing. Extends ISO/IEC 27001. - ISO/IEC 27701, Guidelines for effective enterprise risk management. - ISO 31000, Specifies implementation of cryptographic techniques. - ISO 11889, Guideline for collecting, identifying and preserving electronic evidence  - ISO 27037, Guides effective security incident investigations, emphasizes vendor and third-party testing. - ISO 27041, Analyze electronic evidence for incident response. - ISO 27042, Explains incident investigation principles and processes for security practitioners. - ISO 27043,

Leaderboard

Visual style

Options

Switch template

Continue editing: ?