ISO/IEC 29101:2018

Name: ISO/IEC 29101:2018 — Information technology — Security techniques — Privacy architecture framework
SKU: ISO/IEC 29101:2018
Price: 25 EUR
Availability: InStock

Information technology — Security techniques — Privacy architecture framework

Название (английский):

ISO/IEC 29101:2018

Information technology — Security techniques — Privacy architecture framework

Статус документа:: Действующий
Формат:: Электронный (PDF)
Количество страниц:: 42
Дата публикации:: 28 ноября 2018 г.
Издание:: ISO/IEC IS 29101 edition 2 version 1
ICS:: 35.030

Тип поставки:

Full version25 €Ask AI2 €Read online 24h10 €Read online 72h15 €

Язык документа:

ruen

Срок поставки:1 рабочий день

Цена:25 €

Описание (английский):

This document defines a privacy architecture framework that: — specifies concerns for ICT systems that process PII; — lists components for the implementation of such systems; and — provides architectural views contextualizing these components. This document is applicable to entities involved in specifying, procuring, architecting, designing, testing, maintaining, administering and operating ICT systems that process PII. It focuses primarily on ICT systems that are designed to interact with PII principals.

Abstract

Похожие стандарты

Упомянутые в описании и другие стандарты ISO

Overview

ISO/IEC 29101:2018 - Privacy architecture framework defines a high-level architecture for safeguarding personally identifiable information (PII) in information and communication technology (ICT) systems. It specifies the concerns that must be considered when processing PII, lists components for implementing privacy-aware systems, and provides multiple architectural views (component, actor/deployment, interaction) to contextualize those components. The standard is intended for entities involved in specifying, procuring, architecting, designing, testing, maintaining, administering and operating ICT systems that interact with PII principals.

Key technical topics and requirements

Privacy concerns and principles: Builds on ISO/IEC 29100 by mapping privacy principles and defining privacy safeguarding requirements specific to ICT systems that process PII.

PII lifecycle coverage: Addresses lifecycle phases including collection, transfer, use, storage, and disposal of PII.

Architecture layers and components: Organizes privacy-related functionality into layers (for example, privacy settings, identity and access management, and the PII layer) and describes components relevant to each layer.

Actors and deployment views: Describes ICT systems from the perspectives of the PII principal, PII controller, and PII processor, and shows how PII flows between these actors.

Interaction view: Illustrates component-to-component interactions and how privacy controls operate across system boundaries.

Privacy-enhancing technologies (PETs): Shows how PETs can be used as privacy controls within the architecture.

Correspondence and mapping: Provides mapping tables tying concerns to viewpoints and components to help implementers trace requirements to architecture.

Standards alignment: Uses ISO/IEC/IEEE 42010 for architecture description and explicitly ties to privacy management practices and information security engineering.

Practical applications - who uses this standard

System architects and privacy engineers - design privacy-aware ICT architectures and select appropriate components/PETs.

Security architects and developers - integrate identity, access management and data protection controls into system designs.

Procurement and vendors - specify and evaluate privacy requirements in product RFPs and procurements.

Compliance officers and auditors - map organizational privacy safeguarding requirements to technical architecture.

Operations and IT administrators - implement, test, and maintain privacy controls across deployment environments.

ISO/IEC 29101:2018

Abstract

Похожие стандарты

Overview

Key technical topics and requirements

Practical applications - who uses this standard

Related standards and further reading

Технические детали

BS EN ISO/IEC 29100:2020

Information technology. Security techniques. Privacy framework.

BS EN ISO/IEC 29101:2021

Information technology. Security techniques. Privacy architecture framework.

ISO 8212:1986

Soaps and detergents — Techniques of sampling during manufacture

ISO 20662:2020

Ships and marine technology — Hopper dredger supervisory and control systems

ISO 3021:2023

Adventure tourism — Hiking and trekking activities — Requirements and recommendations

ISO 3826-2:2008

Plastics collapsible containers for human blood and blood components — Part 2: Graphical symbols for use on l…

ISO/IEC 24730-1:2014

Information technology — Real-time locating systems (RTLS) — Part 1: Application programming interface (API)

ISO 8668-5:1992

Aircraft — Terminal junction systems — Part 5: Detail specification for type 3 system