Sources of Standards
International Organization for Standardization (ISO) is a consortium of national standards institutes from 157 countries, coordinated through a secretariat in Geneva, Switzerland. ISO is the world's largest developer of standards. ISO 15443: "Information technology - Security techniques - A framework for IT security assurance", ISO/IEC 27002: "Information technology - Security techniques - Code of practice for information security management", ISO-20000: "Information technology - Service management", and ISO/IEC27001: "Information technology - Security techniques - Information security management systems - Requirements" are of particular interest to information security professionals.
The USA National Institute of Standards and Technology (NIST) is a non-regulatory federal agency within the U.S. Department of Commerce. The NIST Computer Security Division develops standards, metrics, tests and validation programs as well as publishes standards and guidelines to increase secure IT planning, implementation, management and operation. NIST is also the custodian of the USA Federal Information Processing Standard publications (FIPS).
The Internet Society is a professional membership society with more than 100 organization and over 20,000 individual members in over 180 countries. It provides leadership in addressing issues that confront the future of the Internet, and is the organization home for the groups responsible for Internet infrastructure standards, including the Internet Engineering Task Force (IETF) and the Internet Architecture Board (IAB). The ISOC hosts the Requests for Comments (RFCs) which includes the Official Internet Protocol Standards and the RFC-2196 Site Security Handbook.
The Information Security Forum is a global nonprofit organization of several hundred leading organizations in financial services, manufacturing, telecommunications, consumer goods, government, and other areas. It undertakes research into information security practices and offers advice in its biannual Standard of Good Practice and more detailed advisories for members.
The IT Baseline Protection Catalogs, or IT-Grundschutz Catalogs, ("IT Baseline Protection Manual" before 2005) are a collection of documents from the German Federal Office for Security in Information Technology (FSI), useful for detecting and combating security-relevant weak points in the IT environment (IT cluster). The collection encompasses over 3000 pages with the introduction and catalogs.
Read more about this topic: Information Security
Famous quotes containing the words sources of, sources and/or standards:
“My profession brought me in contact with various minds. Earnest, serious discussion on the condition of woman enlivened my business room; failures of banks, no dividends from railroads, defalcations of all kinds, public and private, widows and orphans and unmarried women beggared by the dishonesty, or the mismanagement of men, were fruitful sources of conversation; confidence in man as a protector was evidently losing ground, and women were beginning to see that they must protect themselves.”
—Harriot K. Hunt (1805–1875)
“Even healthy families need outside sources of moral guidance to keep those tensions from imploding—and this means, among other things, a public philosophy of gender equality and concern for child welfare. When instead the larger culture aggrandizes wife beaters, degrades women or nods approvingly at child slappers, the family gets a little more dangerous for everyone, and so, inevitably, does the larger world.”
—Barbara Ehrenreich (20th century)
“That’s the great danger of sectarian opinions, they always accept the formulas of past events as useful for the measurement of future events and they never are, if you have high standards of accuracy.”
—John Dos Passos (1896–1970)