Standard finder

Information security, cybersecurity and privacy protection - Requirements for the competence of IT security testing and evaluation laboratories - Part 2: Testing for ISO/IEC 19790 (ISO/IEC/TS 23532-2:2021) (Endorsed by Asociación Española de Normalización in November of 2024.)

Information security, cybersecurity and privacy protection - Requirements for the competence of IT security testing and evaluation laboratories - Part 1: Evaluation for ISO/IEC 15408 (ISO/IEC/TS 23532-1:2021) (Endorsed by Asociación Española de Normalización in November of 2024.)

Information security, cybersecurity and privacy protection - Information security management systems - Requirements - Amendment 1: Climate action changes (ISO/IEC 27001:2022/Amd 1:2024)

Information security, cybersecurity and privacy protection - Guidance on managing information security risks (ISO/IEC 27005:2022) (Endorsed by Asociación Española de Normalización in September of 2024.)

Three-level approach for a set of cybersecurity requirements for cloud services (Endorsed by Asociación Española de Normalización in June of 2024.)

Information security, cybersecurity and privacy protection - Requirements for bodies providing audit and certification of information security management systems - Part 1: General (ISO/IEC 27006-1:2024) (Endorsed by Asociación Española de Normalización in April of 2024.)

Information security, cybersecurity and privacy protection - Evaluation criteria for IT security - Part 1: Introduction and general model (ISO/IEC 15408-1:2022) (Endorsed by Asociación Española de Normalización in January of 2024.)

Information security, cybersecurity and privacy protection - Evaluation criteria for IT security - Part 5: Pre-defined packages of security requirements (ISO/IEC 15408-5:2022) (Endorsed by Asociación Española de Normalización in January of 2024.)

Information security, cybersecurity and privacy protection - Evaluation criteria for IT security - Part 4: Framework for the specification of evaluation methods and activities (ISO/IEC 15408-4:2022) (Endorsed by Asociación Española de Normalización in January of 2024.)

Information security, cybersecurity and privacy protection - Evaluation criteria for IT security - Part 3: Security assurance components (ISO/IEC 15408-3:2022) (Endorsed by Asociación Española de Normalización in January of 2024.)

Information security, cybersecurity and privacy protection - Evaluation criteria for IT security - Part 2: Security functional components (ISO/IEC 15408-2:2022) (Endorsed by Asociación Española de Normalización in January of 2024.)

Privacy Information Management System per ISO/IEC 27701 - Refinements in European context (Endorsed by Asociación Española de Normalización in January of 2024.)

Personal data protection requirements for processing operations (Endorsed by Asociación Española de Normalización in December of 2023.)

Requirements for professional profiles related to personal data processing and protection (Endorsed by Asociación Española de Normalización in December of 2023.)

Security Evaluation Standard for IoT Platforms (SESIP). An effective methodology for applying cybersecurity assessment and re-use for connected products. (Endorsed by Asociación Española de Normalización in December of 2023.)

Information security, cybersecurity and privacy protection - Evaluation criteria for IT security - Methodology for IT security evaluation (ISO/IEC 18045:2022) (Endorsed by Asociación Española de Normalización in December of 2023.)

Information security, cybersecurity and privacy protection - Information security management systems - Requirements (ISO/IEC 27001:2022)

Information security, cybersecurity and privacy protection - Information security controls (ISO/IEC 27002:2022)

Information technology - Online privacy notices and consent (ISO/IEC 29184:2020) (Endorsed by Asociación Española de Normalización in May of 2023.)

Information technology - Security techniques - A framework for access management (ISO/IEC 29146:2016, including Amd 1:2022) (Endorsed by Asociación Española de Normalización in May of 2023.)

Data protection and privacy by design and by default - Technical Report on applicability to the video surveillance industry - State of the art (Endorsed by Asociación Española de Normalización in March of 2023.)

IT security techniques - Competence requirements for information security testers and evaluators - Part 2: Knowledge, skills and effectiveness requirements for ISO/IEC 19790 testers (ISO/IEC 19896-2:2018) (Endorsed by Asociación Española de Normalización in March of 2023.)

IT security techniques - Competence requirements for information security testers and evaluators - Part 1: Introduction, concepts and general requirements (ISO/IEC 19896-1:2018) (Endorsed by Asociación Española de Normalización in March of 2023.)

IT security techniques - Competence requirements for information security testers and evaluators - Part 3: Knowledge, skills and effectiveness requirements for ISO/IEC 15408 evaluators (ISO/IEC 19896-3:2018) (Endorsed by Asociación Española de Normalización in March of 2023.)