Data quality — Part 1: Overview (ISO 8000-1:2022) #
This document provides an overview of the ISO 8000 series.
The following are within the scope of this document:
— stating the scope of the ISO 8000 series as a whole;
— establishing the principles of information and data quality;
— describing the path to data quality;
— describing the structure of the ISO 8000 series;
— providing a summary of the content of each part in the ISO 8000 series;
— establishing the relationship of the ISO 8000 series to other international standards.
Information security management systems (ISO/IEC 27001:2022) #
ISO/IEC 27001 is the world’s best-known standard for information security management systems (ISMS). It defines requirements an ISMS must meet. The ISO/IEC 27001 standard provides companies of any size and from all sectors of activity with guidance for establishing, implementing, maintaining and continually improving an information security management system. Conformity with ISO/IEC 27001 means that an organisation or business has put in place a system to manage risks related to the security of data owned or handled by the company, and that this system respects all the best practices and principles enshrined in this International Standard.
Information security, cybersecurity and privacy protection — Information security controls (ISO/IEC 27002:2022) #
This document provides a reference set of generic information security controls including implementation guidance. This document is designed to be used by organisations:
a) within the context of an information security management system (ISMS) based on ISO/IEC27001;
b) for implementing information security controls based on internationally recognised best practices;
c) for developing organisation-specific information security management guidelines.
Information technology — Security techniques — Code of practice for protection of personally identifiable information (PII) in public clouds acting as PII processors (ISO/IEC 27018:2019) #
This document establishes commonly accepted control objectives, controls and guidelines for implementing measures to protect Personally Identifiable Information (PII) in line with the privacy principles in ISO/IEC 29100 for the public cloud computing environment. In particular, this document specifies guidelines based on ISO/IEC 27002, taking into consideration the regulatory requirements for the protection of PII which can be applicable within the context of the information security risk environment(s) of a provider of public cloud services. This document is applicable to all types and sizes of organisations, including public and private companies, government entities and not-for-profit organisations, which provide information processing services as PII processors via cloud computing under contract to other organisations. The guidelines in this document can also be relevant to organisations acting as PII controllers. However, PII controllers can be subject to additional PII protection legislation, regulations and obligations, not applying to PII processors. This document is not intended to cover such additional obligations.
