10.01.2015 Views

Michele Moss, Booz Allen Hamilton - Build Security In

Michele Moss, Booz Allen Hamilton - Build Security In

Michele Moss, Booz Allen Hamilton - Build Security In

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Using ISO/IEC 27036 with other SC27 Standards<br />

Certify against ISMS and…<br />

…general requirements<br />

for supplier relationships<br />

ISO/IEC 27036-2 – <strong>In</strong>formation<br />

<strong>Security</strong> for Supplier Relationships -<br />

Requirements<br />

…ICT SCRM guidance<br />

ISO/IEC 27036-ICT Supply -<br />

<strong>In</strong>formation <strong>Security</strong> for Supplier<br />

Relationships – ICT Supply Chain<br />

<strong>Security</strong><br />

…Cloud-specific guidance<br />

ISO/IEC 27036-4 - <strong>In</strong>formation<br />

<strong>Security</strong> for Supplier Relationships –<br />

Cloud Services<br />

ISO/IEC 27001 –<br />

<strong>In</strong>formation <strong>Security</strong><br />

Management Systems<br />

…27002 controls<br />

ISO/IEC 27002 – Code of Practice for<br />

<strong>In</strong>formation <strong>Security</strong> Controls<br />

…27017 Cloud Controls<br />

ISO/IEC 27017 - ISMS – Code of<br />

practice for information security<br />

controls for cloud computing<br />

services<br />

Source: <strong>Booz</strong> <strong>Allen</strong> <strong>Hamilton</strong> and DoD<br />

© 2012 Utilities Telecom Council

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!