BS ISO/IEC 21878 - INFORMATION TECHNOLOGY - SECURITY TECHNIQUES - SECURITY GUIDELINES FOR DESIGN AND IMPLEMENTATION OF VIRTUALIZED SERVERS

Available format(s)

Hardcopy , PDF

Language(s)

English

Publisher

British Standards Institution

Foreword
Introduction
1 Scope
2 Normative references
3 Terms and definitions
4 Symbols and abbreviated terms
5 Overview of server virtualization
6 Overview of security threats and risks
7 Recommendations for secure VS lifecycle
8 Planning and design phase - security considerations
9 Implementation phase - security checklist
Annex A (informative) - Risk assessment for VSs
Annex B (informative) - Guidelines for implementing security
checklist items
Bibliography

BS ISO/IEC 21878.

Committee	IST/33/4
DocumentType	Draft
Pages	30
PublisherName	British Standards Institution
Status	Current

ISO/IEC 27036-4:2016	Information technology Security techniques Information security for supplier relationships Part 4: Guidelines for security of cloud services
ISO/IEC 27001:2013	Information technology — Security techniques — Information security management systems — Requirements
ISO/IEC 27017:2015	Information technology — Security techniques — Code of practice for information security controls based on ISO/IEC 27002 for cloud services
ISO/IEC 27002:2013	Information technology Security techniques Code of practice for information security controls
ISO/IEC 27018:2014	Information technology Security techniques Code of practice for protection of personally identifiable information (PII) in public clouds acting as PII processors
ISO/IEC 27005:2011	Information technology Security techniques Information security risk management
ISO/IEC 27033-3:2010	Information technology — Security techniques — Network security — Part 3: Reference networking scenarios — Threats, design techniques and control issues
ISO/IEC 27033-2:2012	Information technology — Security techniques — Network security — Part 2: Guidelines for the design and implementation of network security
ISO/IEC 17789:2014	Information technology — Cloud computing — Reference architecture
ISO/IEC 17788:2014	Information technology — Cloud computing — Overview and vocabulary