BS ISO/IEC 27034-2:2015
ISO/IEC 27034-2:2015(E)
Foreword ........................................................................................................................................................................................................................................iv
Introduction
..................................................................................................................................................................................................................................v
1 Scope
................................................................................................................................................................................................................................. 1
2 Normative references
...................................................................................................................................................................................... 1
..................................................................................................................................................................................... 1
4 Abbreviated terms
.............................................................................................................................................................................................. 1
5 Organization Normative Framework
.............................................................................................................................................. 2
5.1 General ........................................................................................................................................................................................................... 2
5.2 Purpose .......................................................................................................................................................................................................... 2
5.3 Principles ..................................................................................................................................................................................................... 2
5.4 ONF Management Process ............................................................................................................................................................ 2
5.4.1 General...................................................................................................................................................................................... 2
5.4.2 Use of RACI charts in description of activities, roles and responsibilities ..................... 4
5.4.3 Establishing the ONF committee........................................................................................................................ 5
5.4.4 Designing the ONF .......................................................................................................................................................... 6
5.4.5 Implementing the ONF ............................................................................................................................................... 8
5.4.6 Monitoring and reviewing the ONF .............................................................................................................. 10
5.4.7 Improving the ONF ...................................................................................................................................................... 11
5.4.8 Auditing the ONF ..........................................................................................................................................................13
5.5 ONF Elements........................................................................................................................................................................................ 15
5.5.1 General................................................................................................................................................................................... 15
5.5.2 Business context component .............................................................................................................................16
........................................................................................................................ 17
5.5.4 Technological context component ................................................................................................................. 18
......................................................................................................... 19
.................................................................... 20
......................................................................................................................................21
..............................................................................................................................23
............................................................................. 26
........................................................................................................ 32
...........................................................................................33
...........................................................................................34
............................................................................................... 36
Annex A (informative) Aligning the ONF and ASMP with ISO/IEC 15288 and ISO/IEC 12207
through ISO/IEC 15026-4
.........................................................................................................................................................................38
Annex B (informative) ONF implementation example: implementing ISO/IEC 27034
Application Security and its ONF in an existing organization
............................................................................42
Bibliography
.............................................................................................................................................................................................................................52
© ISO/IEC 2015 – All rights reserved iii
Contents Page
British Standards Institution
Provided by IHS under license with BSI - Uncontrolled Copy
Licensee=Chongqing Institute of quality and Standardization 5990390
Not for Resale, 2015/10/15 03:27:14
No reproduction or networking permitted without license from IHS
--`,``,``,``,,```````,``,-`-``,```,,,`---
评论2
最新资源