Summary

This Recommendation | International Standard:

a)     establishes guidelines and general principles for initiating, implementing, maintaining and improving information security controls in telecommunications organizations based on ISO/IEC 27002;

b)     provides an implementation baseline of information security controls within telecommunications organizations to ensure the confidentiality, integrity and availability of telecommunications facilities, services and information handled, processed or stored by the facilities and services.

As a result of implementing this Recommendation | International Standard, telecommunications organizations, both within and between jurisdictions, will:

a)     be able to ensure the confidentiality, integrity and availability of global telecommunications facilities, services and the information handled, processed or stored within global facilities and services;

b)     have adopted secure collaborative processes and controls ensuring the lowering of risks in the delivery of telecommunications services;

c)     be able to deliver information security in an effective and efficient manner;

d)     have adopted a consistent holistic approach to information security;

e)     be able to improve the security culture of organizations, raise staff awareness and increase public trust.