Published standards

-

ISO/IEC 27000-series



  1. ISO/IEC 27000 — Information security management systems — Overview and vocabulary[9]
  2. ISO/IEC 27001 — Information technology - Security Techniques - Information security management systems — Requirements. The 2013 release of the standard specifies an information security management system in the same formalized, structured and succinct manner as other ISO standards specify other kinds of management systems.
  3. ISO/IEC 27002 — Code of practice for information security controls - essentially a detailed catalog of information security controls that might be managed through the ISMS
  4. ISO/IEC 27003 — Information security management system implementation guidance
  5. ISO/IEC 27004 — Information security management — Monitoring, measurement, analysis and evaluation[10]
  6. ISO/IEC 27005 — Information security risk management[11]
  7. ISO/IEC 27006 — Requirements for bodies providing audit and certification of information security management systems
  8. ISO/IEC 27007 — Guidelines for information security management systems auditing (focused on auditing the management system)
  9. ISO/IEC TR 27008 — Guidance for auditors on ISMS controls (focused on auditing the information security controls)
  10. ISO/IEC 27009 — Essentially an internal document for the committee developing sector/industry-specific variants or implementation guidelines for the ISO27k standards
  11. ISO/IEC 27010 — Information security management for inter-sector and inter-organizational communications
  12. ISO/IEC 27011 — Information security management guidelines for telecommunications organizations based on ISO/IEC 27002
  13. ISO/IEC 27013 — Guideline on the integrated implementation of ISO/IEC 27001 and ISO/IEC 20000-1 (derived from ITIL)
  14. ISO/IEC 27014 — Information security governance.[12] Mahncke assessed this standard in the context of Australian e-health.[13]
  15. ISO/IEC TR 27015 — Information security management guidelines for financial services
  16. ISO/IEC TR 27016 — information security economics
  17. ISO/IEC 27017 — Code of practice for information security controls based on ISO/IEC 27002 for cloud services
  18. ISO/IEC 27018 — Code of practice for protection of personally identifiable information (PII) in public clouds acting as PII processors
  19. ISO/IEC TR 27019 — Information security for process control in the energy industry
  20. ISO/IEC 27031 — Guidelines for information and communication technology readiness for business continuity
  21. ISO/IEC 27032 — Guideline for cybersecurity
  22. ISO/IEC 27033-1 — Network security - Part 1: Overview and concepts
  23. ISO/IEC 27033-2 — Network security - Part 2: Guidelines for the design and implementation of network security
  24. ISO/IEC 27033-3 — Network security - Part 3: Reference networking scenarios - Threats, design techniques and control issues
  25. ISO/IEC 27033-4 — Network security - Part 4: Securing communications between networks using security gateways
  26. ISO/IEC 27033-5 — Network security - Part 5: Securing communications across networks using Virtual Private Networks (VPNs)
  27. ISO/IEC 27033-6 — Network security - Part 6: Securing wireless IP network access
  28. ISO/IEC 27034-1 — Application security - Part 1: Guideline for application security
  29. ISO/IEC 27034-2 — Application security - Part 2: Organization normative framework
  30. ISO/IEC 27034-6 — Application security - Part 6: Case studies
  31. ISO/IEC 27035-1 — Information security incident management - Part 1: Principles of incident management
  32. ISO/IEC 27035-2 — Information security incident management - Part 2: Guidelines to plan and prepare for incident response
  33. ISO/IEC 27036-1 — Information security for supplier relationships - Part 1: Overview and concepts
  34. ISO/IEC 27036-2 — Information security for supplier relationships - Part 2: Requirements
  35. ISO/IEC 27036-3 — Information security for supplier relationships - Part 3: Guidelines for information and communication technology supply chain security
  36. ISO/IEC 27036-4 — Information security for supplier relationships - Part 4: Guidelines for security of cloud services
  37. ISO/IEC 27037 — Guidelines for identification, collection, acquisition and preservation of digital evidence
  38. ISO/IEC 27038 — Document redaction
  39. ISO/IEC 27039 — Intrusion prevention
  40. ISO/IEC 27040 — Storage security[14]
  41. ISO/IEC 27041 — Investigation assurance
  42. ISO/IEC 27042 — Analyzing digital evidence
  43. ISO/IEC 27043 — Incident investigation
  44. ISO/IEC 27050-1 — Electronic discovery - Part 1: Overview and concepts
  45. ISO 27799 — Information security management in health using ISO/IEC 27002 - guides health industry organizations on how to protect personal health information using ISO/IEC 27002.

கருத்துகள்

கருத்துரையிடுக

இந்த வலைப்பதிவில் உள்ள பிரபலமான இடுகைகள்

SIPVicious using kali linux

-
படம்
SIPVicious February 18, 2014 Sniffing/Spoofing SIPVicious Package Description SIPVicious suite is a set of tools that can be used to audit SIP based VoIP systems. It currently consists of four tools:. svmap – this is a sip scanner. Lists SIP devices found on an IP range svwar – identifies active extensions on a PBX svcrack – an online password cracker for SIP PBX svreport – manages sessions and exports reports to various formats svcrash – attempts to stop unauthorized svwar and svcrack scans. Source: https://code.google.com/p/sipvicious/ SIPVicious Homepage  |  Kali SIPVicious Repo Author: Sandro Gauci License: GPLv2 Tools included in the sipvicious package svcrack – Online password cracker for SIP PBX root@kali:~# svcrack -h Usage: svcrack -u username [options] target examples: svcrack -u100 -d dictionary.txt 10.0.0.1 svcrack -u100 -r1-9999 -z4 10.0.0.1 Options:   --version             show program's ver...
மேலும் படிக்கவும்
-
படம்
Acoustic Attack Against HDDs Can Cause Permanent Damage CCTV DVR, PCs, ATMs Hard disks play a vital role in numerous computing systems including, personal computers, closed-circuit television (CCTV) systems, medical bedside monitors, and automated teller machines (ATMs). Security researchers from Purdue University show that an attacker can use acoustic sound to cause significant vibrations in HDDs internal components.They show even if a small displacement in the head leads to malfunction with HDD operation and can cause permanent damage. HDD Acoustic Attack An HDD consists of two components the platters and the read-write heads. The data will be stored in platters and the read/write operations performed by heads. If the attacker can create the acoustic signals nearer to victim device in audible frequencies by using an external speaker or any other device may result in remote software exploitation which allows an attacker to deceive the user to play a malicious sound attach...
மேலும் படிக்கவும்

Three Major Categories of Telecom Fraud

-
படம்
A Guide to Detecting and Preventing Telecom Fraud According to the Federal Trade Commission, telecom fraud continues to account for more and more fraud complaints each year. The numbers continue to grow and new technology has led to an onslaught of new telecom fraud tactics. The latest schemes are difficult to track and investigate because of their frequency, their layers of anonymity, and their global nature. This guide will help you learn about the different types of telecom fraud and industry best practices for detection and prevention. Three Major Categories of Telecom Fraud We will divide the many telecom fraud schemes into three broad categories, based on who the fraudsters are targeting. These categories are: Schemes to Defraud Telecom Service Providers These schemes are the most complicated, and exploit telecom service providers using stimulated traffic, SIP trunking, regulatory loopholes, and more. Schemes to Defraud Subscribers This is simply any scheme that...
மேலும் படிக்கவும்