SC 27

from Wikipedia, the free encyclopedia

ISO / IEC JTC 1 Information Technology / SC 27 IT Security Techniques is a standardization committee in the Joint Technical Committee 1 (English: Joint Technical Committee ISO / IEC JTC 1 ) of ISO and IEC . The German part of this international standardization work is supervised by DIN NIA-01-27 IT security procedure as the responsible German mirror committee for the sub-committee SC 27 (English: Subcommittee SC 27).

Working area of ​​the SC 27 in ISO / IEC

The work area of ​​ISO / IEC JTC 1 / SC 27 is the development of standards for generally applicable methods and techniques in the field of IT security , i. H. security in information technology .

The International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC) have created the JTC 1 joint committee for cooperation in the field of information technology . Working drafts for international standards are sent to the national representatives involved in standardization for evaluation. For publication as an ISO / IEC standard or international standard (IS), a positive vote of 75% of the nations participating in the vote is required.

Structure and working groups

The international secretariat of ISO / IEC JTC 1 / SC 27 is located at the German Institute for Standardization eV (DIN) in Germany. The breakdown of the international working groups as sub-committees of SC 27, their individual work areas and the respective secretariats (with the responsible national standards organization) can be found in the table below.

Body Work area office
ISO / IEC JTC 1 / SC 27 IT security procedures DIN
ISO / IEC JTC 1 / SC 27 / WG 1 Information security management systems BSi
ISO / IEC JTC 1 / SC 27 / WG 2 Cryptography and IT security techniques JISC
ISO / IEC JTC 1 / SC 27 / WG 3 Evaluation criteria SIS
ISO / IEC JTC 1 / SC 27 / WG 4 IT security measures and services SPRING
ISO / IEC JTC 1 / SC 27 / WG 5 Identity management and privacy protection DIN

IT security procedure standards

ISO / IEC JTC 1 / SC 27 processes a whole series of standards on IT security procedures, including the ISO / IEC 2700x series of standards for information security management systems (ISMS) and the three parts of ISO / IEC 15408 for common criteria for evaluating IT Security (or Common Criteria) . A complete list of the standards supported by the ISO / IEC JTC 1 / SC 27 or the DIN NIA-01-27 IT security procedure is available as a so-called Standing Document No 7 - SC27 Projects & Standards (SD7) as a ZIP file on the web freely available.

Individual evidence

  1. ^ Homepage of ISO / IEC JTC 1 / SC 27 Information Technology - Security Techniques
  2. ↑ Mirroring of ISO / IEC JTC 1 / SC 27 Information Technology - Security Techniques
  3. ↑ <http://www.jtc1sc27.din.de/sce/SD7>

Web links