Standardizzazione famiglia ISO/IEC 27000

Tra dicembre 2010 e gennaio 2011, sono state inviate agli esperti
dell'Uninfo le bozze delle seguenti norme perché le commentassero:
- ISO/IEC 27000 (2o draft)
- ISO/IEC 27001 (4o draft)
- ISO/IEC 27002 (3o draft)
- TR ISO/IEC 27008 - "Guidelines for auditors on information security
controls" (Draft)
- ISO/IEC 27010 - "Information security management for intersector and
inter-organisational communications" (Committee draft)
- ISO/IEC 27013 - Relazioni tra 27001 e 20000 (3o draft)
- ISO/IEC 27014 - Governance of information security (Committee draft)
- ISO/IEC 27015 (2nd WD) -Guidelines for financial services
- ISO/IEC 27016 - Organizational economics (1o draft)
- ISO/IEC 27033-2 (FCD, revision of ISO/IEC 18028-2:2006) - Guidelines for
the design of network security
- ISO/IEC 27033-3 - Reference networking scenarios -- Threats, design
techniques and control issues (Final Draft)
- ISO/IEC 27033-4 (3rd WD; revision of ISO/IEC 18028-3:2005) -Securing
communications between networks using security gateways
- ISO/IEC 27033-5 (WD) - Securing communications across networks using
Virtual Private Networks (VPNs)
- ISO/IEC 27036-3 (Preliminary draft) - Guidelines for ICT supply chain
security
- ISO/IEC 27038 (1st WD) - Specification for digital redaction

Inoltre, è stata approvata la FDIS della ISO/IEC FDIS 27031 (Guidelines for
information and communication technology readiness for business continuity)
e quindi dovrebbe essere pubblicata la versione definitiva.

Nessuna nuova notizia sulla ISO/IEC 27037 (Guidelines for identification,
collection, acquisition and preservation of digital evidence) che era
arrivata al terzo Working Draft e che desta un certo interesse perché
relativa alla computer forensics.