Тезис
ISO/IEC TR 18044:2004 provides advice and guidance on information security incident management for information security managers and for information system managers.
ISO/IEC TR 18044:2004 provides
- information on the benefits to be obtained from and the key issues associated with a good information security incident management approach (to convince senior corporate management and those personnel who will report to and receive feedback from a scheme that the scheme should be introduced and used);
- information on examples of information security incidents, and an insight into their possible causes;
- a description of the planning and documentation required to introduce a good structured information security incident management approach;
- a description of the information security incident management process*.
* Quick, co-ordinated and effective responses to an information security incident require extensive technical and procedural preparations. Information security incident responses may consist of immediate, short- and long-term actions. Any actions undertaken as the response to an incident should be based on previously developed, documented and accepted security incident response procedures and processes, including those for post-response analysis.
Общая информация
-
Текущий статус: ОтозваноДата публикации: 2004-10Этап: Отмена международного стандарта [95.99]
-
Версия: 1
-
Технический комитет :ISO/IEC JTC 1/SC 27ICS :35.030
- RSS обновления
Жизненный цикл
-
Сейчас
-
00
Предварительная стадия
-
10
Стадия, связанная с внесением предложения
-
20
Подготовительная стадия
-
30
Стадия, связанная с подготовкой проекта комитета
-
40
Стадия, связанная с рассмотрением проекта международного стандарта
-
50
Стадия, на которой осуществляется принятие стандарта
-
60
Стадия, на которой осуществляется публикация
-
90
Стадия пересмотра
-
95
Стадия, на которой осуществляется отмена стандарта
-
00
-
Пересмотрен
ОтозваноISO/IEC 27035:2011