Name: ISO/IEC 27033-3:2010 — Information technology — Security techniques — Network security — Part 3: Reference networking scenarios — Threats, design techniques and control issues
SKU: ISO/IEC 27033-3:2010
Price: 25 EUR
Availability: InStock

ISO/IEC 27033-3:2010

Information technology — Security techniques — Network security — Part 3: Reference networking scenarios — Threats, design techniques and control issues

Название (английский):

ISO/IEC 27033-3:2010

Information technology — Security techniques — Network security — Part 3: Reference networking scenarios — Threats, design techniques and control issues

Статус документа:: Действующий
Формат:: Электронный (PDF)
Количество страниц:: 30
Дата публикации:: 3 декабря 2010 г.
Издание:: ISO/IEC IS 27033 edition 1 version 1
ICS:: 35.030

Тип поставки:

Full version25 €Ask AI2 €Read online 24h10 €Read online 72h15 €

Язык документа:

ruen

Срок поставки:1 рабочий день

Цена:25 €

Описание (английский):

ISO/IEC 27033-3:2010 describes the threats, design techniques and control issues associated with reference network scenarios. For each scenario, it provides detailed guidance on the security threats and the security design techniques and controls required to mitigate the associated risks. Where relevant, it includes references to ISO/IEC 27033-4 to ISO/IEC 27033-6 to avoid duplicating the content of those documents. The information in ISO/IEC 27033-3:2010 is for use when reviewing technical security architecture/design options and when selecting and documenting the preferred technical security architecture/design and related security controls, in accordance with ISO/IEC 27033-2. The particular information selected (together with information selected from ISO/IEC 27033-4 to ISO/IEC 27033-6) will depend on the characteristics of the network environment under review, i.e. the particular network scenario(s) and ‘technology' topic(s) concerned. Overall, ISO/IEC 27033-3:2010 will aid considerably the comprehensive definition and implementation of security for any organization's network environment.

Overview

ISO/IEC 27033-3:2010 is part of the ISO/IEC 27033 series on network security. It provides detailed guidance on reference network scenarios, focusing on the security threats, design techniques, and control issues relevant to each scenario. The standard is intended to support reviews of technical security architecture/design options and to help select and document preferred technical security architectures and related security controls in accordance with ISO/IEC 27033-2. It organizes guidance around practical scenarios (Internet access for employees, B2B, B2C, enhanced collaboration, mobile and travelling users, home/small office support, network segmentation, outsourced services) to make network security design and risk mitigation actionable.

Key Topics

Threat analysis for network scenarios: description and cataloguing of threats (e.g., malware, DoS, social engineering) relevant to each scenario.
Security design techniques: architectural approaches and design considerations to mitigate scenario-specific risks.
Control issues and recommendations: selection and documentation of controls to protect infrastructure, services and application assets.
Risk analysis and business impact: guidance on evaluating vulnerabilities and weighing mitigation options against business impact.
Network activities protection: securing management, control/signaling, and end-user data traffic.
Scenario-based structure: clauses dedicated to Internet access, B2B, B2C, collaboration, segmentation, remote/mobile/travelling users and outsourcing.
Cross-references: pointers to related parts of ISO/IEC 27033 (Parts 4–6) and normative references such as ISO/IEC 27000 and 27033-1.

Practical Applications

Who uses ISO/IEC 27033-3:2010 and how:

Network and security architects use it to design secure network topologies and technical security architectures aligned to real-world scenarios.
IT managers and CISOs apply it when selecting security controls and documenting architecture choices during procurement or risk assessments.
Security consultants and auditors reference it for scenario-based threat assessments and control evaluation.
Operational teams leverage its scenario guidance for implementing controls for employee Internet access, VPN/mobile access, outsourcing arrangements, and secure collaboration services.

Practical uses include performing risk analysis of network designs, identifying appropriate controls for B2B/B2C interfaces, securing remote and mobile access, and guiding network segmentation and outsourced service controls.

Related Standards

ISO/IEC 27033-1: Overview and concepts (network security)
ISO/IEC 27033-2: Guidelines for design and implementation of network security
ISO/IEC 27033-4 to 27033-6: Topic-specific guidance (referenced to avoid duplication)
ISO/IEC 27000: Information security management vocabulary

ISO/IEC 27033-3:2010 is a practical, scenario-driven resource for anyone implementing or evaluating network security architecture and controls. It helps translate risk analysis into concrete network design and control decisions.

ISO/IEC 27033-3:2010

Похожие стандарты

Abstract

Overview

Key Topics

Practical Applications

Related Standards

Технические детали

ISO/IEC 27033-1:2015

Information technology — Security techniques — Network security — Part 1: Overview and concepts

BS ISO/IEC 27033-2:2012

Information technology. Security techniques. Network security. Guidelines for the design and implementation o…

ISO/IEC 27000:2014

Information technology — Security techniques — Information security management systems — Overview and vocabul…

BS ISO/IEC 27033-4:2014

Information technology. Security techniques. Network security. Securing communications between networks using…