This ICT Security Standards Roadmap has been developed to assist in the
development of security standards by bringing together information about
existing standards and current standards work in key standards development
organizations.
In addition to aiding the process of standards development, the Roadmap will
provide information that will help potential users of security standards,
and other standards stakeholders, gain an understanding of what standards
are available or under development as well as the key organizations that are
working on these standards.
The Roadmap was initiated by ITU-T Study Group 17. In January 2007 the
initiative became a collaborative effort when the European Network and Information
Security Agency (ENISA) and the Network and Information Security Steering
Group (NISSG) joined Study Group 17 in the project.
Part 1 contains information about the Roadmap structure and about each of
the listed standards organizations, their structure and the security
standards work being undertaken. In addition it contains information on
terminology by providing links to existing security glossaries and
vocabularies.
Part 3 is structured with the same taxonomy as Part 2 but contains work in
progress, rather than standards that have already been approved and
published. Part 3 will also contain information on inter-relationships
between groups undertaking the work and on potential overlaps between
existing projects.
Part 4 is intended to capture possible future areas of security standards
work where gaps or needs have been identified as well as areas where
proposals have been made for specific new standards work.
Part 4 includes
provision for direct feedback, comments and suggestions.
Part 5 is a recent addition to the Roadmap (May 2007).
It is intended to be a repository of security-related best practices
contributed by our community of members.
This section will be based on contributions from the security community.
Where possible contributions should refer to best practices relating
to standards-based security but other best practices will be considered
for inclusion.
It is important to note that the Roadmap is a work-in-progress. It is
intended that it be developed and enhanced to include other standards
organizations as well as a broader representation of the work from
organizations already included. It is hoped that standards organizations
whose work is not represented in this version of the Roadmap will provide
information to ITU-T about their work so that it may be included in future
editions.
In May 2007, Part 2 of the Roadmap was converted to a searchable database format that allows direct links to the information of participating standards organizations. The database format will allow each participating organization to manage its own data within the Roadmap. This will enable more timely updating of the
information and will also reduce the overhead in maintaining the
information.
Suggestions for additional entries, comments and suggestions may be
submitted to: tsbmail@itu.int