Publication details
| Publication CODE |
Title |
| NBN EN ISO/IEC 27040:2016 (2016-08) |
INFORMATION TECHNOLOGY -- SECURITY TECHNIQUES -- STORAGE SECURITY |
| |
| Price Excl. VAT |
Total number of pages, tables and drawings |
|
25.00 €
|
3 P.. |
Description
ISO/IEC 27040:2015 provides detailed technical guidance on how organizations can define an appropriate level of risk mitigation by employing a well-proven and consistent approach to the planning, design, documentation, and implementation of data storage security. Storage security applies to the protection (security) of information where it is stored and to the security of the information being transferred across the communication links associated with storage. Storage security includes the security of devices and media, the security of management activities related to the devices and media, the security of applications and services, and security relevant to end-users during the lifetime of devices and media and after end of use. Storage security is relevant to anyone involved in owning, operating, or using data storage devices, media, and networks. This includes senior managers, acquirers of storage product and service, and other non-technical managers or users, in addition to managers and administrators who have specific responsibilities for information security or storage security, storage operation, or who are responsible for an organization's overall security program and security policy development. It is also relevant to anyone involved in the planning, design, and implementation of the architectural aspects of storage network security. ISO/IEC 27040:2015 provides an overview of storage security concepts and related definitions. It includes guidance on the threat, design, and control aspects associated with typical storage scenarios and storage technology areas. In addition, it provides references to other International Standards and technical reports that address existing practices and techniques that can be applied to storage security.
|
| Class |
C
|
Available files
ATTENTION: Belgian registered standards (NBN EN or NBN HD) are generally
only available in English or French. Only the cover page is translated
and the document itself is in English or in French.
Very important notice: 98% of the text of the NBN EN 55XXX,
NBN EN 6XXXX comes from the IEC text which is NOT included.
This text can be ordered here:
ISO/IEC 27040:2015.
For the series NBN EN 50XXX, the standards are however complete.
|
|
|
Status
| Status |
Registered trilingual Belgian standard EN or FR or DE |
| Situation |
Currently active
|
|
Origin
| Committee |
ISO/IEC JTC 1/SC 27
IT SECURITY TECHNIQUES
|
Approval
| BEC Approval |
2016-06-19 |
| NBN Approval |
2016-09-23 |
| Belgian Official Journal |
2016-10-31 |
| Registration |
167901 |
| ICS-Code (International Standards Classification) |
35.030
|
| NBN Status |
New |
|
| Date of ratification (d.o.r.) |
2016-06-19 |
| Date of availability (d.a.v.) |
2016-08-24 |
| Date of announcement (d.o.a.) |
2016-11-30 |
| Date of publication (d.o.p.) |
2017-02-28 |
| Date of withdrawal former edition (d.o.w.) |
2017-02-28 |
|
Correspondences with international standards
| Relation |
International standard |
Date |
| is identical to |
EN ISO/IEC 27040:2016
|
2016-08-24 |
| is identical to |
ISO/IEC 27040:2015/ed. 1.0
|
2015-01-15 |
Relations to belgian/foreign publications
| Type |
Origin |
Code |
Date |
| Standard |
Foreign |
ISO/IEC 17788:2014 |
|
| Standard |
Foreign |
ISO/IEC 27000 |
|
| Standard |
Foreign |
ISO/IEC 27001:2013 |
|
| Standard |
Foreign |
ISO/IEC 27005 |
|
|
