ISO/IEC /FDAmd 1. Additional terminology and concepts. General information. Status: Deleted. Edition: 1. Number of pages: Technical. ISO/IEC •defines terms for identity management, and •specifies core concepts of identity and identity management and their relationships. Aug 1, ISO/IEC consists of the following parts, under the general title Information technology — Security techniques — A framework for identity.
|Published (Last):||1 September 2012|
|PDF File Size:||20.99 Mb|
|ePub File Size:||5.20 Mb|
|Price:||Free* [*Free Regsitration Required]|
Shane Day July 17, at 4: Addresses the management needs for ensuring the security of applications  and presents an overview of application security through the introduction of definitions, concepts, principles and processes .
It seems to me that major vendors are more interested in ISO when it comes to IdAM than they are ISOwhich tells you about the applicability of the standard.
In many cases they use terms that are just as unclear as the one they are trying to define e. The only place I see is reference to it from other standards. By continuing to use this website, you agree to iao use. The focus of each working group is described in the group’s terms of reference. Specifies encryption systems for the purpose of data confidentiality .
Information technology — Security techniques — Code of practice for izo security controls. Defines a privacy architecture framework that: This includes generic methods, techniques and guidelines to address both security and privacy aspects, such as: In short, avoid this standard.
Countries pay a fee to ISO to be members of subcommittees. There are other ones out there which do a better job of describing the key concepts of identity 2476 identity management.
Specifies six methods for authenticated encryption with the security objectives of: Provides guidance for the handling of digital evidence that could be of evidential value .
Describes the overview and vocabulary of ISMS . Views Read Edit View history.
ISO/IEC /FDAmd 1 – Additional terminology and concepts
They redefine commonly used terms in the industry authentication is redefined to mean a form of verification. Specifies the structure and data elements of Authentication Context for Biometrics ACBiowhich checks the validity of biometric verification process results .
Posted on February 10, at 9: Provides a privacy framework that: Introduction and general model. Security controls and services. Applicable to entities involved in specifying, procuring, designing, testing, maintaining, administering and operating ICT systems that process PII.
Reference architecture and requirements. Hi Doug, I was wondering whether you ever got around to sharing other standards and resources that do a better job of describing the concepts and terminology around identity.
ISO/IEC JTC 1/SC 27
These were among the reasons that a nmber of key countries voted against this standard. Information technology — Security techniques — Guidelines for information and communication technology readiness for business continuity. SC 27 engages in active liaison and collaboration with appropriate bodies to ensure the proper development and application of SC 27 standards and technical reports in relevant areas.
Create a free website or blog at WordPress. It is entirely ICT focused though at other ixo it claims otherwise which is unhelpful in the context of a general framework for identity. Fill in your details below or click an icon to log in: To find out more, including how to control cookies, see here: Notify me of new posts via email.
You are commenting using your Twitter account. Hi Doug, funny that I should come across your blog first when looking into advice onto adhering to this standard. Provides a framework for the secure and reliable 2470 of identities by: Leave a Reply Cancel reply Enter your comment here I couldn’t agree more with everything in it! Unfortunately it was adopted.
ISO/IEC JTC 1/SC 27 – Wikipedia
This standard is supposed to define key terms for identity management and specify core concepts in identity and identity management. Notify me of new comments via email. I’ve seen this scenario play out more times than I have seen it work correctly. We are looking for an experienced Director of Finance for our head quarters in Noumea. Information technology — Security techniques — Requirements for bodies providing audit and certification of information security management systems.