Information technology. Security techniques. Management of information and communications technology security. Concepts and models for information and communications technology security management
BS ISO/IEC 13335-1:2004The main objectives of BS ISO/IEC 13335 are:
- to define and describe the concepts associated with the management of IT security
- to identify the relationships between the management of IT security and management of IT in general
- to present several models which can be used to explain IT security
- to provide general guidance on the management of IT security.
Contents
Foreword
Introduction
Scope
Definitions
Security concepts and relationships
Objectives, strategies and policies
Organizational aspects of ICT security
ICT security management functions