17/30355373 DC : 0

Superseded

BS ISO/IEC 27019 - INFORMATION TECHNOLOGY - SECURITY TECHNIQUES - INFORMATION SECURITY CONTROLS FOR THE ENERGY UTILITY INDUSTRY

Available format(s)

Hardcopy , PDF

Superseded date

30-11-2017

Language(s)

English

Publisher

British Standards Institution

Foreword
0 Introduction
1 Scope
2 Normative references
3 Terms and definitions
4 Energy utility industry specific requirements related
  to ISO/IEC 27001
5 Energy utility industry specific guidance related to
  ISO/IEC 27002:2013
ENR 5 Information security policies
ENR 6 Organization of information security
ENR 7 Human resource security
ENR 8 Asset management
ENR 9 Access control
ENR 10 Cryptography
ENR 11 Physical and environmental security
ENR 12 Operations security
ENR 13 Communications security
ENR 14 System acquisition, development
       and maintenance
ENR 15 Supplier relationships
ENR 16 Information security incident management
ENR 17 Information security aspects of business
       continuity management
ENR 18 Compliance
Annex A (Normative) - Energy utility industry specific
        reference control objectives and controls
Bibliography

BS ISO/IEC 27019.

Committee	IST/33/1
DocumentType	Draft
Pages	50
PublisherName	British Standards Institution
Status	Superseded

ISO/IEC 27001:2013	Information technology — Security techniques — Information security management systems — Requirements
IEC TS 62443-1-1:2009	Industrial communication networks - Network and system security - Part 1-1: Terminology, concepts and models
ISO/IEC 27002:2013	Information technology Security techniques Code of practice for information security controls
ISO/IEC 27000:2016	Information technology Security techniques Information security management systems Overview and vocabulary
IEC TS 62351-8:2011	Power systems management and associated information exchange - Data and communications security - Part 8: Role-based access control