ГОСТ Р ИСО/МЭК 27036-1-2021. Национальный стандарт Российской Федерации. Информационные технологии. Методы и средства обеспечения безопасности. Информационная безопасность во взаимоотношениях с поставщиками. Часть 1. Обзор и основные понятия
БИБЛИОГРАФИЯ
[1] | ISO/IEC 15288, Systems and software engineering - System life cycle processes |
[2] | ISO/IEC 12207, Systems and software engineering - Software life cycle processes |
[3] | ISO/IEC 20000, Information technology - Service management - Part 1: Service management system requirements |
[4] | ISO/IEC 27000, Information technology - Security techniques - Information security management systems - Overview and vocabulary |
[5] | ISO/IEC 27001, Information technology - Security techniques - Information security management systems - Requirements |
[6] | ISO/IEC 27002, Information technology - Security techniques - Code of practice for information security controls |
[7] | ISO/IEC 27005, Information technology - Security techniques - Information security risk management |
[8] | ISO/IEC 27014, Information technology - Security techniques - Governance of information security |
[9] | ISO/IEC 27035, Information technology - Security techniques - Information security incident management |
[10] | ISO 28000, Specification for security management systems for the supply chain |
[11] | ISO 28001, Security management systems for the supply chain - Best practices for implementing supply chain security assessments and plans - Requirements and guidance |
[12] | ISO 9000:2005, Quality management systems - Fundamentals and vocabulary |
УДК 006.34:004.056:004.056.5:004.056.53:006.354 | ОКС 35.040 |
Ключевые слова: информационная безопасность, информационные технологии, методы и средства обеспечения безопасности, поставщик, приобретающая сторона, риск, информационные системы |