• There are no items in your cart
We noticed you’re not on the correct regional site. Switch to our AMERICAS site for the best experience.
Dismiss alert

PD ISO/IEC TR 27008:2011

Superseded
Superseded

A superseded Standard is one, which is fully replaced by another Standard, which is a new edition of the same Standard.

View Superseded by
superseded

A superseded Standard is one, which is fully replaced by another Standard, which is a new edition of the same Standard.

Information technology. Security techniques. Guidelines for auditors on information security controls
Available format(s)

Hardcopy , PDF

Superseded date

24-01-2019

Language(s)

English

Published date

31-10-2011

FOREWORD
INTRODUCTION
1 SCOPE
2 NORMATIVE REFERENCES
3 TERMS AND DEFINITIONS
4 STRUCTURE OF THIS TECHNICAL REPORT
5 BACKGROUND
6 OVERVIEW OF INFORMATION SECURITY CONTROL REVIEWS
7 REVIEW METHODS
8 ACTIVITIES
ANNEX A (INFORMATIVE) - TECHNICAL COMPLIANCE CHECKING
        PRACTICE GUIDE
ANNEX B (INFORMATIVE) - INITIAL INFORMATION GATHERING
        (OTHER THAN IT)
BIBLIOGRAPHY

Specifies guidance on reviewing the implementation and operation of controls, including technical compliance checking of information system controls, in compliance with an organization's established information security standards.

Committee
IST/33
DocumentType
Standard
Pages
46
PublisherName
British Standards Institution
Status
Superseded
SupersededBy

Standards Relationship
ISO/IEC TR 27008:2011 Identical

ISO 19011:2011 Guidelines for auditing management systems
ISO/IEC 27001:2013 Information technology — Security techniques — Information security management systems — Requirements
ISO/IEC 27006:2015 Information technology — Security techniques — Requirements for bodies providing audit and certification of information security management systems
ISO/IEC 27002:2013 Information technology Security techniques Code of practice for information security controls
ISO/IEC 27005:2011 Information technology Security techniques Information security risk management
ISO/IEC 27007:2017 Information technology Security techniques Guidelines for information security management systems auditing
ISO/IEC 27000:2016 Information technology Security techniques Information security management systems Overview and vocabulary
ISO Guide 73:2009 Risk management — Vocabulary

View more information
£262.00
Excluding VAT

Access your standards online with a subscription

Features

  • Simple online access to standards, technical information and regulations.

  • Critical updates of standards and customisable alerts and notifications.

  • Multi-user online standards collection: secure, flexible and cost effective.