ГОСТ ISO/IEC 27014-2021. Межгосударственный стандарт. Информационные технологии. Информационная безопасность, кибербезопасность и защита конфиденциальности. Руководство деятельностью по обеспечению информационной безопасности

[1]

ISO/IEC 27001, Information technology - Security techniques - Information security management systems - Requirements

[2]

ISO/IEC 27002:2013, Information security, cybersecurity and privacy protection - Code of practice for information security controls

[3]

ISO/IEC 27011:2016, Information security, cybersecurity and privacy protection - Code of practice for Information security controls based on ISO/IEC 27002 for telecommunications organizations

[4]

ISO 37001:2016, Anti-bribery management systems - Requirements with guidance for use

[5]

ISO/IEC 38500:2015, Information technology - Governance of IT for the organization

[6]

Ohki E., Harada Y., Kawaguchi S., Shiozaki T., Kgaua T., Information Security Governance framework, Proceedings of the first ACM workshop on Information security governance, pp. 1 - 6, 2009

[7]

IT Governance Institute (ITGI), Information Security Governance: Guidance for Information Security Managers: 2008

[8]

ITGI, Information Security Governance Guidance for Boards of Directors and Executive Management 2nd Edition: 2006

[9]

ITGI, COBIT Control Practices: Guidance to Achieve Control Objective for Successful IT Governance, 2nd Edition: 2007

[10]

ISF, Standard of Good Practice for Information Security: 2018

УДК 006.34:004.056:004.056.5:004.056.53

МКС 35.030

Ключевые слова: информационная безопасность, менеджмент информационной безопасности, система менеджмента информационной безопасности (СМИБ), руководство деятельностью по обеспечению информационной безопасности, модель ОКМ (оценка, координация, мониторинг)