STATO DELLE NORME INTERNAZIONALI

(marzo 2010)

• 27000:2009 ISMS Overview and vocabulary
• 27001:2005 ISMS requirements
• 27002:2005 Code of practice for ISM
• 27003:2010 ISMS implementation guidance
• 27004:2009 Information Security Management Measurements
• 27005:2008 Information Security Risk Management
• 27006:2007 Requirements for bodies providing audit and certification of ISMS
• 27007 2ndCD ISMS auditing guidelines
• 27008 3rdWD Guidance for auditors on ISMS controls


• 27010 2ndWD ISM for inter-sector and inter-organisational communications
• 27011:2008 ISM guidelines for telecommunications organizations based on ISO/IEC 27002
• 27013 1stWD Guidance on the integrated implementation of ISO/IEC 20000 and ISO/IEC 27001
• 27014 2ndWD Information security governance framework
• 27015 1stWD Information security management guidelines for financial and insurance services
• 27031 1stCD Guidelines for ICT readiness for Business Continuity
• 27032 1stCD Guidelines for Cybersecurity
• 27033-1 2ndFCD Guidelines for network security
• 27033-2 1stCD Guidelines for the design and implementation of network security
• 27033-3 FCD Reference network scenarios – Risks, design techniques and control issues
• 27033-4 1stWD Securing communications between networks using security gateways
• 27034-1 2ndCD Application security overview and concepts
• 27034-2 1stWD Organization normative framework
• 27035 3rdCD Information security incident management
• 27036 2ndWD Guidelines for security of outsourcing
• 27037 2ndWD Guidelines for identification, collection and/or acquisition and preservation of digital evidence

LEGENDA: in grassetto le norme in vigore. Ciclo di vita degli standard ISO:
FDIS (Final Draft International Standard) - Testo finale pronto per la pubblicazione
DIS   (Draft International Standard) - Versione semi-definitiva del testo
FCD  (Final Committee Draft) - Testo consolidato pronto a passare a DIS, numerato a seconda della versione
CD    (Committee Draft) - Testo consolidato, numerato a seconda della versione
WD   (Working Draft) - Testo allo stato iniziale, numerato a seconda della versione
NWI  (New Working Item) - Proposta iniziale per un nuovo standard