Information security, cybersecurity and privacy protection — Governance of information security
This document provides guidance on concepts, objectives and processes for the governance of information security, by which organizations can evaluate, direct, monitor and communicate the information security-related processes within the organization.
The intended audience for this document is:
— governing body and top management;
— those who are responsible for evaluating, directing and…
Information security, cybersecurity and privacy protection - Governance of information security
This document provides guidance on concepts, objectives and processes for the governance of information security, by which organizations can evaluate, direct, monitor and communicate the information security-related processes within the organization.
The intended audience for this document is:
— governing body and top management;
— those who are responsible for evaluating, directing and…
Blockchain and distributed ledger technologies — Security management of digital asset custodians
This document discusses the threats, risks, and controls related to:
— systems that provide digital asset custodian services and/or exchange services to their customers (consumers and businesses) and management of security when an incident occurs;
— asset information (including the signature key of the digital asset) that a custodian of digital assets manages.
This document is addressed…
Information technology — Open systems interconnection — Part 1: The Directory: Overview of concepts,...
This document provides the directory capabilities required by many application layer standards and telecommunication services. Among the capabilities which it provides are those of "user-friendly naming", whereby objects can be referred to by names which are suitable for citing by human users (though not all objects need have user-friendly names); and "name-to-address mapping…
Information technology - Open systems interconnection - Part 1: The Directory: Overview of concepts,...
This document provides the directory capabilities required by many application layer standards and telecommunication services. Among the capabilities which it provides are those of "user-friendly naming", whereby objects can be referred to by names which are suitable for citing by human users (though not all objects need have user-friendly names); and "name-to-address mapping…
Information technology — Big data reference architecture — Part 3: Reference architecture
1 Scope
This document specifies the big data reference architecture (BDRA). The reference architecture includes concepts and architectural views.
The reference architecture specified in this document defines two architectural viewpoints:
— a user view defining roles/sub-roles, their relationships, and types of activities within a big data ecosystem;
— a functional view defining the…
Information technology — Cloud computing — Taxonomy based data handling for cloud services
1 Scope
This document:
— describes a framework for the structured expression of data-related policies and practices in the cloud computing environment, based on the data taxonomy in ISO/IEC 19944;
— provides guidelines on application of the taxonomy for handling of data based on data subcategory and classification;
— covers expression of data-related policies and practices including, but not…
Information technology — Smart City ICT reference framework — Part 2: Smart city knowledge managemen...
This document specifies a generic knowledge management framework for a smart city, focusing on creating, capturing, sharing, using and managing smart city knowledge. It also gives the key practices which are required to be implemented to safeguard the use of knowledge, such as interoperability of heterogeneous data and governance of multi-sources services within a smart city.
Information technology - Smart City ICT reference framework - Part 2: Smart city knowledge managemen...
This document specifies a generic knowledge management framework for a smart city, focusing on creating, capturing, sharing, using and managing smart city knowledge. It also gives the key practices which are required to be implemented to safeguard the use of knowledge, such as interoperability of heterogeneous data and governance of multi-sources services within a smart city.
Managing records in cloud computing environments — Part 1: Issues and concerns
This document presents a model for cloud records management and outlines the risks and issues that are considered by records managers before adopting cloud services for records management. The model for cloud records management includes a stakeholder model, processes, metadata, architecture, and use cases. Risks and issues are classified into those originating from cloud services internally and…
