|
Work item:
|
X.1051
|
|
Subject/title:
|
Information technology - Security techniques - Code of practice for Information security controls based on ISO/IEC 27002 for telecommunications organizations
|
|
Status:
|
Approved on 2016-04-29
|
|
Approval process:
|
AAP
|
|
Type of work item:
|
Recommendation
|
|
Version:
|
Rev.
|
|
Equivalent number:
|
ISO/IEC 27011 (Common)
|
|
Timing:
|
-
|
|
Liaison:
|
ISO/IEC JTC1/SC27/WG1
|
|
Supporting members:
|
Canada, Hitachi, Japan, KDDI, Korea (Republic of), LAC, and NICT.
|
|
Summary:
|
This Recommendation | International Standard:
a) establishes guidelines and general principles for initiating, implementing, maintaining, and improving information security controls in telecommunications organizations based on ISO/IEC 27002;
b) provides an implementation baseline of information security controls within telecommunications organizations to ensure the confidentiality, integrity and availability of telecommunications facilities, services and information handled, processed or stored by the facilities and services.
As a result of implementing this Recommendation | International Standard, telecommunications organizations, both within and between jurisdictions, will:
a) be able to assure the confidentiality, integrity and availability of the global telecommunications facilities, services and the information handled, processed or stored within the global facilities and services;
b) have adopted secure collaborative processes and controls ensuring the lowering of risks in the delivery of telecommunications services;
c) be able to deliver information security in an effective and efficient manner;
d) have adopted a consistent holistic approach to information security;
e) be able to improve the security culture of organisations, raise staff awareness and increase public trust.
|
|
Comment:
|
-
|
|
Reference(s):
|
|
|
Historic references:
|
|
Contact(s):
|
|
| ITU-T A.5 justification(s): |
|
|
|
|
First registration in the WP:
2013-05-06 16:09:27
|
|
Last update:
2016-05-02 15:48:56
|
