★Низкие цены. Оригиналы и переводы — экономьте время и бюджет.

Каталог Подписки О компании Поддержка и оплата Публичная оферта Контакты

Поиск

Корзинапуста

GLSTDStandards Store

Официальный магазин стандартов ГОСТ, ISO, ASTM. Электронная доставка, актуальные редакции, прозрачные цены.

Компания

О компании
Контакты
Поддержка и оплата

Помощь

Каталог
Корзина
Поиск

Правовая информация

Публичная оферта
Политика конфиденциальности
Условия использования

Способы оплаты:

//ISO/IEC 27013:2021/Amd 1:2024

ISO/IEC 27013:2021/Amd 1:2024

Name: ISO/IEC 27013:2021/Amd 1:2024 — Information security, cybersecurity and privacy protection — Guidance on the integrated implementation of ISO/IEC 27001 and ISO/IEC 20000-1 — Amendment 1
SKU: ISO/IEC 27013:2021/Amd 1:2024
Price: 21.83 EUR
Availability: InStock

Information security, cybersecurity and privacy protection — Guidance on the integrated implementation of ISO/IEC 27001 and ISO/IEC 20000-1 — Amendment 1

Название (английский):

Information security, cybersecurity and privacy protection — Guidance on the integrated implementation of ISO/IEC 27001 and ISO/IEC 20000-1 — Amendment 1

Статус документа:: Действующий
Формат:: Электронный (PDF)
Количество страниц:: 4
Дата публикации:: 10 декабря 2024 г.
Издание:: ISO/IEC IS 27013 edition 3 version 1
ICS:: 03.080.99

Тип поставки:

Full version22 €Ask AI2 €Read online 24h10 €Read online 72h15 €

Язык документа:

ruen

Срок поставки:1 рабочий день

Цена:22 €

Abstract

Overview

ISO/IEC 27013:2021/Amd 1:2024 is an important amendment to the international standard offering guidance on the integrated implementation of ISO/IEC 27001:2022 and ISO/IEC 20000-1:2018. This update, published by ISO in 2024, aligns requirements and terminologies between the two widely recognized management system standards for and .

Key Topics

Integrated Implementation Guidance Offers comprehensive advice on harmonizing ISO/IEC 27001’s ISMS and ISO/IEC 20000-1’s SMS, highlighting overlapping and unique requirements.
Updates to References Replaces all ISO/IEC 27001:2013 references with the latest ISO/IEC 27001:2022, ensuring alignment with current best practices.
Clarification of Controls and Requirements Explains the distinction between requirements (mandatory elements) and controls (often optional or risk-based), especially in ISO/IEC 27001 Annex A, and how these relate to SMS requirements.
Risk Treatment and Control Selection Emphasizes the organization's responsibility to perform information security risk assessments and tailor controls accordingly, integrating security measures with IT service management processes.
Requirements on Change Management and Configuration Management Updates and clarifies terms, stresses planned, documented control of changes to ISMS and IT services, and alerts to differences in ‘configuration management’ definitions between the two standards.
Annex Modifications Detailed changes in annex tables showing the correspondence of clauses and terminology between ISO/IEC 27001:2022 and ISO/IEC 20000-1:2018, assisting in clearer understanding and practical usage.

Applications

Organizations adopting ISO/IEC 27013:2021/Amd 1:2024 guidance can effectively integrate their information security management systems (ISMS) with IT service management systems (SMS) to achieve:

Enhanced coordination between security and service management teams
Streamlined processes reducing duplication and operational conflicts
Comprehensive risk management encompassing both information assets and IT services
Improved compliance with legal, contractual, and regulatory requirements relevant to cybersecurity and privacy
Strengthened change management practices aligned across ISMS and SMS
Better service availability and continuity supported by integrated controls

This integration supports sectors such as finance, healthcare, telecommunications, and public services that require robust cybersecurity measures combined with reliable IT service delivery.

Related Standards

ISO/IEC 27001:2022 – Information Security Management Systems - Requirements The core standard setting out requirements for establishing, implementing, maintaining, and continually improving an ISMS with a focus on information security risks.
ISO/IEC 20000-1:2018 – IT Service Management Systems - Requirements Defines requirements for establishing an SMS to ensure effective planning, delivery, and improvement of IT services with a focus on customer satisfaction and service quality.
ISO/IEC 27000 series – Overview and Vocabulary for Information Security Management Provides foundational concepts and terminology supporting ISO/IEC 27001 and related standards, facilitating common understanding.
Additional Guidelines on Risk Management and Privacy Though not directly amended in ISO/IEC 27013:2021/Amd 1:2024, organizations may refer to ISO/IEC 27701 for privacy information management and ISO 31000 for risk management principles.

By applying ISO/IEC 27013:2021/Amd 1:2024, organizations gain crucial guidance to unify their cybersecurity and service management approaches efficiently, ensuring resilient, compliant, and customer-focused operations.

Технические детали

Технический комитет: ISO/IEC JTC 1/SC 27 - Information security, cybersecurity and privacy protection
SKU: ISO/IEC 27013:2021/Amd 1:2024

Главная

Каталог

ISO/IEC 27013:2015

Отменён

Information technology — Security techniques — Guidance on the integrated implementation of ISO/IEC 27001 and…

39 · PDF

25 €

ISO/IEC 27000:2014

Отменён

Information technology — Security techniques — Information security management systems — Overview and vocabul…

31 · PDF

25 €

BS EN 17926:2023

Действующий

Privacy Information Management System per ISO/IEC 27701. Refinements in European context.

PDF

50 €

ISO 31000:2018

Действующий

Risk management — Guidelines

Overview ISO 31000:2018 - Risk management - Guidelines provides a unified, organization‑wide approach to managing risk. It offers adaptable guidance that can be customized to any organization, sector…

21 · PDF

25 €

PDF

ISO/IEC 27013:2021/Amd 1:2024

Abstract

Overview

Похожие стандарты

Key Topics

Applications

Related Standards

Технические детали

ISO/IEC 27013:2015

Information technology — Security techniques — Guidance on the integrated implementation of ISO/IEC 27001 and…

ISO/IEC 27000:2014

Information technology — Security techniques — Information security management systems — Overview and vocabul…

BS EN 17926:2023

Privacy Information Management System per ISO/IEC 27701. Refinements in European context.

ISO 31000:2018

Risk management — Guidelines