Codes & Standards - Purchase
CAN/CSA-ISO/IEC 27009:18
Information technology — Security techniques — Sector-specific application of ISO/IEC 27001 — Requirements (Adopted ISO/IEC 27009:2016, first edition, 2016-06-15)
SKU: 2425889
Published by CSA Group
Publication Year 2018
25 pages
Withdrawn
Product Details
Standards development within the Information Technology sector is harmonized with international standards development. Through the CSA Technical Committee on Information Technology (TCIT), Canadians serve as the SCC Mirror Committee (SMC) on ISO/IEC Joint Technical Committee 1 on Information Technology (ISO/IEC JTC1) for the Standards Council of Canada (SCC), the ISO member body for Canada and sponsor of the Canadian National Committee of the IEC. Also, as a member of the International Telecommunication Union (ITU), Canada participates in the International Telegraph and Telephone Consultative Committee (ITU-T).
This International Standard defines the requirements for the use of ISO/IEC 27001 in any specific sector (field, application area or market sector). It explains how to include requirements additional to those in ISO/IEC 27001, how to refine any of the ISO/IEC 27001 requirements, and how to include controls or control sets in addition to ISO/IEC 27001:2013, Annex A.
This International Standard ensures that additional or refined requirements are not in conflict with the requirements in ISO/IEC 27001.
This International Standard is applicable to those involved in producing sector-specific standards that relate to ISO/IEC 27001.
Scope
This International Standard defines the requirements for the use of ISO/IEC 27001 in any specific sector (field, application area or market sector). It explains how to include requirements additional to those in ISO/IEC 27001, how to refine any of the ISO/IEC 27001 requirements, and how to include controls or control sets in addition to ISO/IEC 27001:2013, Annex A.
This International Standard ensures that additional or refined requirements are not in conflict with the requirements in ISO/IEC 27001.
This International Standard is applicable to those involved in producing sector-specific standards that relate to ISO/IEC 27001.