iTeh StandardsiTeh Standards
EURUSD
Your shopping cart is empty.
SIST

SIST EN ISO/IEC 29134:2020/oprA1:2022

(Amendment)

Information technology - Security techniques - Guidelines for privacy impact assessment - Amendment 1 (ISO/IEC 29134:2017/DAM 1:2022)

Information technology - Security techniques - Guidelines for privacy impact assessment - Amendment 1 (ISO/IEC 29134:2017/DAM 1:2022)

2022-11-08: WI abandoned to follow cancellation of WI in ISO (notification from ISO to dataservice on 2022-11-08

Informationstechnik - Sicherheitsverfahren - Leitlinien für die Datenschutz-Folgenabschätzung - Änderung 1 (ISO/IEC 29134:2017/DAM 1:2022)

Technologies de l'information - Techniques de sécurité - Lignes directrices pour l'étude d'impacts sur la vie privée - Amendement 1 (ISO/IEC 29134:2017/DAM 1:2022)

Informacijska tehnologija - Varnostne tehnike - Smernice za ocenjevanje vpliva na zasebnost - Dopolnilo A1 (ISO/IEC 29134:2017/DAM 1:2022)

General Information

Status
Not Published
Public Enquiry End Date
07-Jul-2022
ICS
35.030 - IT Security
Technical Committee
ITC - Information technology
Current Stage
98 - Abandoned project (Adopted Project)
Start Date
16-Jan-2023
Due Date
21-Jan-2023
Completion Date
16-Jan-2023
Ref Project
EN ISO/IEC 29134:2020/prA1 - Information technology - Security techniques - Guidelines for privacy impact assessment - Amendment 1 (ISO/IEC 29134:2017/DAM 1:2022)

Relations

Amends
SIST EN ISO/IEC 29134:2020 - Information technology - Security techniques - Guidelines for privacy impact assessment (ISO/IEC 29134:2017)
Effective Date
08-Dec-2021

Buy Standard

EN ISO/IEC 29134:2020/oprA1:2022EN ISO/IEC 29134:2020/oprA1:2022
PreviousNext
Draft
EN ISO/IEC 29134:2020/oprA1:2022
English language
3 pages
sale 10% off
Preview
sale 10% off
Preview
e-Library read for
1 day

Standards Content (Sample)

SLOVENSKI STANDARD
SIST EN ISO/IEC 29134:2020/oprA1:2022
01-julij-2022
Informacijska tehnologija - Varnostne tehnike - Smernice za ocenjevanje vpliva na
zasebnost - Dopolnilo A1 (ISO/IEC 29134:2017/DAM 1:2022)
Information technology - Security techniques - Guidelines for privacy impact assessment
- Amendment 1 (ISO/IEC 29134:2017/DAM 1:2022)
Informationstechnik - Sicherheitsverfahren - Leitlinien für die Datenschutz-
Folgenabschätzung - Änderung 1 (ISO/IEC 29134:2017/DAM 1:2022)
Technologies de l'information - Techniques de sécurité - Lignes directrices pour l'étude
d'impacts sur la vie privée - Amendement 1 (ISO/IEC 29134:2017/DAM 1:2022)
Ta slovenski standard je istoveten z: EN ISO/IEC 29134:2020/prA1
ICS:
35.030 Informacijska varnost IT Security
SIST EN ISO/IEC en,fr,de
29134:2020/oprA1:2022
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

---------------------- Page: 1 ----------------------
SIST EN ISO/IEC 29134:2020/oprA1:2022

---------------------- Page: 2 ----------------------
SIST EN ISO/IEC 29134:2020/oprA1:2022
DRAFT AMENDMENT
ISO/IEC 29134:2017/DAM 1
ISO/IEC JTC 1/SC 27 Secretariat: DIN
Voting begins on: Voting terminates on:
2022-04-18 2022-07-11
Information technology — Security techniques —
Guidelines for privacy impact assessment
AMENDMENT 1
Technologies de l'information — Techniques de sécurité — Lignes directrices pour l'étude d'impacts sur la
vie privée
AMENDEMENT 1
ICS: 35.030
This document is circulated as received from the committee secretariat.
THIS DOCUMENT IS A DRAFT CIRCULATED
FOR COMMENT AND APPROVAL. IT IS
ISO/CEN PARALLEL PROCESSING
THEREFORE SUBJECT TO CHANGE AND MAY
NOT BE REFERRED TO AS AN INTERNATIONAL
STANDARD UNTIL PUBLISHED AS SUCH.
IN ADDITION TO THEIR EVALUATION AS
BEING ACCEPTABLE FOR INDUSTRIAL,
TECHNOLOGICAL, COMMERCIAL AND
USER PURPOSES, DRAFT INTERNATIONAL
STANDARDS MAY ON OCCASION HAVE TO
BE CONSIDERED IN THE LIGHT OF THEIR
POTENTIAL TO BECOME STANDARDS TO
WHICH REFERENCE MAY BE MADE IN
Reference number
NATIONAL REGULATIONS.
ISO/IEC 29134:2017/DAM 1:2022(E)
RECIPIENTS OF THIS DRAFT AR
...

Questions, Comments and Discussion

Ask us and Technical Secretary will try to provide an answer. You can facilitate discussion about the standard in here.

This May Also Interest You

SIST
SIST EN ISO 21177:2023(Main)
Intelligent transport systems - ITS station security services for secure session establishment and authentication between trusted devices (ISO 21177:2023)
EN ISO 21177:2023

This document contains specifications for a set of ITS station security services required to ensure the authenticity of the source and integrity of information exchanged between trusted entities, i.e.:
—    between devices operated as bounded secured managed entities, i.e. "ITS Station Communication Units" (ITS-SCU) and "ITS station units" (ITS-SU) as specified in ISO 21217; and
—    between ITS-SUs (composed of one or several ITS-SCUs) and external trusted entities such as sensor and control networks.
These services include the authentication and secure session establishment which are required to exchange information in a trusted and secure manner.
These services are essential for many intelligent transport system (ITS) applications and services including time-critical safety applications, automated driving, remote management of ITS stations (ISO 24102-2), and roadside/infrastructure-related services.

  • Standard
    114 pages
    English language
    sale 10% off
    e-Library read for
    1 day
  • Draft
    110 pages
    English language
    sale 10% off
    e-Library read for
    1 day
SIST
SIST EN ISO/IEC 29146:2023(Main)
Information technology - Security techniques - A framework for access management (ISO/IEC 29146:2016, including Amd 1:2022)
EN ISO/IEC 29146:2023

ISO/IEC 29146 defines and establishes a framework for access management (AM) and the secure management of the process to access information and Information and Communications Technologies (ICT) resources, associated with the accountability of a subject within some context. ISO/IEC 29146 provides explanations about related architecture, components and management functions and concepts, terms and definitions applicable to distributed access management. The subjects involved in access management might be uniquely recognized to access information systems, as defined in ISO/IEC 24760.

  • Standard
    48 pages
    English language
    sale 10% off
    e-Library read for
    1 day
  • Draft
    41 pages
    English language
    sale 10% off
    e-Library read for
    1 day
SIST
SIST EN ISO/IEC 29184:2023(Main)
Information technology - Online privacy notices and consent (ISO/IEC 29184:2020)
EN ISO/IEC 29184:2023

ISO/IEC 29184 specifies controls which shape the content and the structure of online privacy notices as well as the process of asking for consent to collect and process personally identifiable information (PII) from PII principals.
ISO/IEC 29184 is applicable in any online context where a PII controller or any other entity processing PII informs PII principals of processing.

  • Standard
    34 pages
    English language
    sale 10% off
    e-Library read for
    1 day
  • Draft
    31 pages
    English language
    sale 10% off
    e-Library read for
    1 day
SIST
SIST EN ISO/IEC 19896-3:2023(Main)
IT security techniques - Competence requirements for information security testers and evaluators - Part 3: Knowledge, skills and effectiveness requirements for ISO/IEC 15408 evaluators (ISO/IEC 19896-3:2018)
EN ISO/IEC 19896-3:2023

This document provides the specialized requirements to demonstrate competence of individuals in
performing IT product security evaluations in accordance with ISO/IEC 15408 (all parts) and ISO/IEC
18045.

  • Standard
    42 pages
    English language
    sale 10% off
    e-Library read for
    1 day
  • Draft
    39 pages
    English language
    sale 10% off
    e-Library read for
    1 day
SIST
SIST-TP CEN/CLC/TR 17919:2023(Main)
Data protection and privacy by design and by default - Technical Report on applicability to the videosurveillance industry - State of the art
CEN/CLC/TR 17919:2023

This document contains recommendations on how to integrate the principle of ‘data protection and privacy by design’ during the entire lifecycle of video-surveillance products and services, in order to achieve ‘data protection and privacy by default’.

  • Technical report
    15 pages
    English language
    sale 10% off
    e-Library read for
    1 day
SIST
SIST EN ISO/IEC 19896-1:2023(Main)
IT security techniques - Competence requirements for information security testers and evaluators - Part 1: Introduction, concepts and general requirements (ISO/IEC 19896-1:2018)
EN ISO/IEC 19896-1:2023

This document defines terms and establishes an organized set of concepts and relationships to
understand the competency requirements for information security assurance conformance-testing
and evaluation specialists, thereby establishing a basis for shared understanding of the concepts and
principles central to the ISO/IEC 19896 series across its user communities. It provides fundamental
information to users of the ISO/IEC 19896 series

  • Standard
    19 pages
    English language
    sale 10% off
    e-Library read for
    1 day
  • Draft
    16 pages
    English language
    sale 10% off
    e-Library read for
    1 day
SIST
SIST EN ISO/IEC 19896-2:2023(Main)
IT security techniques - Competence requirements for information security testers and evaluators - Part 2: Knowledge, skills and effectiveness requirements for ISO/IEC 19790 testers (ISO/IEC 19896-2:2018)
EN ISO/IEC 19896-2:2023

This document provides the minimum requirements for the knowledge, skills and effectiveness
requirements of individuals performing testing activities for a conformance scheme using ISO/IEC
19790:2012 and ISO/IEC 24759

  • Standard
    42 pages
    English language
    sale 10% off
    e-Library read for
    1 day
  • Draft
    39 pages
    English language
    sale 10% off
    e-Library read for
    1 day
SIST
SIST-TS CEN/CLC/TS 17880:2023(Main)
Protection Profile for Smart Meter - Minimum Security requirements
CEN/CLC/TS 17880:2022

This Protection Profile describes a set of security requirements for smart meters, based on the ‘minimum security requirements’ for components of AMI infrastructures in [5]. The requirements in [5] were based on the concept that there are a common/generic set of underlying ‘minimum’ security requirements associated with smart metering requirement specifications in a number of EU Member States

  • Technical specification
    72 pages
    English language
    sale 10% off
    e-Library read for
    1 day
SIST
SIST-TS CEN ISO/IEC/TS 27006-2:2023(Main)
Requirements for bodies providing audit and certification of information security management systems - Part 2: Privacy information management systems (ISO/IEC/TS 27006-2:2021)
CEN ISO/IEC/TS 27006-2:2022

This document specifies requirements and provides guidance for bodies providing audit and certification of a privacy information management system (PIMS) according to ISO/IEC 27701 in combination with ISO/IEC 27001, in addition to the requirements contained within ISO/IEC 27006 and ISO/IEC 27701. It is primarily intended to support the accreditation of certification bodies providing PIMS certification.
The requirements contained in this document need to be demonstrated in terms of competence and reliability by anybody providing PIMS certification, and the guidance contained in this document provides additional interpretation of these requirements for any body providing PIMS certification.
NOTE     This document can be used as a criteria document for accreditation, peer assessment or other audit processes.

  • Technical specification
    18 pages
    English language
    sale 10% off
    e-Library read for
    1 day
SIST
SIST EN 17640:2023(Main)
Fixed time cybersecurity evaluation methodology for ICT products
EN 17640:2022

This document describes the cybersecurity evaluation methodology for ICT products. It is intended for use for all three assurance levels as defined in the Cybersecurity Act (i.e. basic, substantial and high).
The methodology is comprised of different evaluation blocks including assessment activities that comply with the evaluation requirements of the CSA for the three levels.
Where appropriate, it can be applied both to 3rd party evaluation and self-assessment.
It is expected that this methodology may be used by different candidate schemes and verticals providing a common framework to evaluate ICT products.

  • Standard
    54 pages
    English language
    sale 10% off
    e-Library read for
    1 day
  • Draft
    56 pages
    English language
    sale 10% off
    e-Library read for
    1 day