Information security, cybersecurity and privacy protection - New concepts and changes in ISO/IEC 154...
This document:
— introduces the break down between the former ISO/IEC 15408 series (ISO/IEC 15408-1:2009, ISO/IEC 15408-2:2008) and ISO/IEC 15408-3:2008) and ISO/IEC 18045:2008 and the new parts introduced in the ISO/IEC 15408:2022 series and ISO/IEC 18045:2022;
— presents the concepts newly introduced as well as the rationale for their inclusion;
— proposes an evolution path and…
This Standard covers urinal and water closet partitions and specifies requirements for materials,
construction, performance testing, and markings. This standard shall not regulate field installed
walls or doors used to provide privacy for water closets or urinals constructed in compliance
with the building code.
Active assisted living (AAL) system development guidance for AAL service providers
IEC SRD 63219:2022 provides guidance for AAL service providers to design, procure, implement, and maintain AAL systems throughout their service life.
The objective is to ensure that AAL systems are designed, configured, and installed to meet the needs of the AAL user and the requirements from applicable industry standards and global regulations. Ultimately, however, users of this document are…
Information security, cybersecurity and privacy protection — Information security controls
This document provides a reference set of generic information security controls including implementation guidance. This document is designed to be used by organizations:
a) within the context of an information security management system (ISMS) based on ISO/IEC27001;
b) for implementing information security controls based on internationally recognized best practices;
c) for developing organization…
Information security, cybersecurity and privacy protection - Information security controls
This document provides a reference set of generic information security controls including implementation guidance. This document is designed to be used by organizations:
a) within the context of an information security management system (ISMS) based on ISO/IEC27001;
b) for implementing information security controls based on internationally recognized best practices;
c) for developing organization…
Information security, cybersecurity and privacy protection — Biometric information protection
This document covers the protection of biometric information under various requirements for confidentiality, integrity and renewability/revocability during storage and transfer. It also provides requirements and recommendations for the secure and privacy-compliant management and processing of biometric information.
This document specifies the following:
— analysis of the threats to and…
Information security, cybersecurity and privacy protection - Biometric information protection
This document covers the protection of biometric information under various requirements for confidentiality, integrity and renewability/revocability during storage and transfer. It also provides requirements and recommendations for the secure and privacy-compliant management and processing of biometric information.
This document specifies the following:
— analysis of the threats to and…
Health informatics — Requirements for customer-oriented health cloud service agreements
This document describes a core set of cloud service agreements for customer-oriented health cloud services.
This document covers a customer-oriented cloud service agreement that can be used in healthcare organizations and public health centers that use health cloud services.
This document defines key characteristics in the health cloud service agreement that are indispensable in providing optimal…
Digital trust and identity – Part 2: Delivery of healthcare services
This Standard specifies minimum requirements for federating the exchange of health information between systems and provides the basis for implementing a user-centric, interoperable health network for the delivery of healthcare services.
The scope of this Standard comprises the following:
— definition of a trust model (Section 4);
— user agency (Section 4.2)
— data standards (Section 4.3)
—…
Information technology, cybersecurity and privacy protection — Cybersecurity framework development g...
1 Scope
This document specifies guidelines for developing a cybersecurity framework. It is applicable to cybersecurity framework creators regardless of their organizations’ type, size or nature.
