信息安全、网络安全和隐私保护 – 电信组织基于ISO/IEC 27002的信息安全控制 |
本建议书 |国际标准:a) 在ISO/IEC 27002的基础上,为电信组织中启动、实施、维护和改进信息安全控制制定导则和一般原则;b) 在电信组织内部提供信息安全控制实施基准,以确保电信设施、服务及设施和服务所处理或存储的信息的保密性、完整性和可用性。由于实施了本建议书|国际标准,各辖区内和辖区间的电信组织将:a) 能够确保全球电信设施、服务及全球设施和服务处理或存储的信息的保密性、完整性和可用性;b) 采用可确保降低电信服务交付风险的安全协作流程和控制措施;c) 能够以有效和高效的方式提供信息安全;d) 对信息安全采取始终如一的整体方法;e) 能够改善组织的安全文化,提高职员的意识并增加公众信任。 |
|
Citation: |
https://handle.itu.int/11.1002/1000/15559 |
Series title: |
X series: Data networks, open system communications and security X.1000-X.1099: Information and network security X.1050-X.1079: Security management |
Approval date: |
2023-06-13 |
Identical standard: | ISO/IEC 27011:2024 (Common) |
Provisional name: | X.ism |
Approval process: | AAP |
Status: |
In force |
Maintenance responsibility: |
ITU-T Study Group 17 |
Further details: |
Patent statement(s)
Development history
|
|
|
|
ITU-T Supplement
|
Title
|
Status
|
Summary
|
Table of contents
|
Download
|
X Suppl. 13 (09/2018)
|
ITU-T X.1051 – Supplement on information security management users' guide for Recommendation ITU-T X.1051
|
In force
|
here
|
here
|
here
|
X Suppl. 34 (01/2019)
|
ITU-T X.1051 – Supplement on code of practice for information security controls for telecommunication organizations
|
In force
|
here
|
here
|
here
|
X Suppl. 36 (09/2021)
|
ITU-T X.1051 – Supplement on critical security controls for information and network security management by telecommunication organizations
|
In force
|
here
|
here
|
here
|
Title |
Approved on |
Download |
Guidelines for identity-based cryptosystems used for cross-domain secure communications
|
2023
|
here
|
Overview of hybrid approaches for key exchange with quantum key distribution
|
2022
|
here
|
Guidelines for security management of using artificial intelligence technology
|
2022
|
here
|
Successful use of security standards (2nd edition)
|
2020
|
here
|
Description of the incubation mechanism and ways to improve it
|
2020
|
here
|
Strategic approaches to the transformation of security studies
|
2020
|
here
|
|