ISO/IEC 27038:2014 PDF

Name: ISO/IEC 27038:2014 — Information technology — Security techniques — Specification for digital redaction
SKU: ISO/IEC 27038:2014
Price: 25 EUR
Availability: InStock

Information technology — Security techniques — Specification for digital redaction

Название (английский):

ISO/IEC 27038:2014

Information technology — Security techniques — Specification for digital redaction

Статус документа:: Действующий
Формат:: Электронный (PDF)
Количество страниц:: 9
Дата публикации:: 13 марта 2014 г.
Издание:: ISO/IEC IS 27038 edition 1 version 1
ICS:: 35.030

Тип поставки:

Full version135 €Read online 24h10 €Read online 72h15 €

Язык документа:

ruen

Срок поставки:2 раб. дн. (перевод)

Цена:135 €

Описание (английский):

ISO/IEC 27038:2014 specifies characteristics of techniques for performing digital redaction on digital documents. It also specifies requirements for software redaction tools and methods of testing that digital redaction has been securely completed. ISO/IEC 27038:2014 does not include the redaction of information from databases.

Abstract

Похожие стандарты

Стандарты, упомянутые в описании

Overview

ISO/IEC 27038:2014 - "Information technology - Security techniques - Specification for digital redaction" defines requirements and characteristics for securely redacting digital documents. The standard covers how to permanently remove information (including metadata, images, audio/video and embedded objects) so redacted data cannot be recovered, and it specifies requirements for software redaction tools and redaction testing methods. Note: ISO/IEC 27038:2014 does not cover redaction of information stored in databases.

Key Topics

Scope and definitions: terms such as redaction, anonymization and personally identifiable information (PII).

Redaction principles: retain the original (unredacted) master, perform redaction on copies, ensure irreversible removal, use approved methods and controlled environments, and delete intermediary stages.

Levels of redaction: BASIC (no contextual mitigation) and ENHANCED (addresses contextual disclosure risks, e.g., length or placement revealing content).

Redaction processes:

Paper intermediaries (print/redact/scan workflows).
Digital image intermediaries (scan-based approaches).
Simple digital redaction (plain-text workflows, character encoding considerations).
Complex digital redaction (original complex formats, non-text elements, embedded objects).
Contextual handling to avoid re-identification from surrounding content.

Metadata and non-text content: review and remove hidden metadata and embedded content that could leak sensitive information.

Software tool characteristics: features and controls expected of redaction tools (access control, auditability, irreversible removal).

Redaction testing: requirements and methods to verify that redaction is complete and secure.

Record keeping: maintaining logs and records of redaction actions and decisions.

Format guidance: annex material (e.g., PDF redaction) for common file types.

Applications

ISO/IEC 27038 is practical for organizations that need to share or publish documents while protecting sensitive content:

Legal firms and e‑discovery teams preparing documents for disclosure

Government agencies releasing public records or freedom-of-information responses

Records management and archives teams anonymizing files containing PII

Compliance and privacy officers implementing PII anonymization and data protection workflows

Software vendors developing secure redaction tools and PDF/redaction features

IT/security teams integrating redaction into document-handling processes

Related Standards (if applicable)

ISO/IEC 29100 - Privacy framework and definitions for PII/anonymization (cited by 27038)

ISO/IEC 27001 / ISO/IEC 27002 - Information security management and controls (context for secure redaction practices)

Keywords: ISO/IEC 27038:2014, digital redaction, redaction tools, redaction testing, PII anonymization, PDF redaction, metadata removal, security techniques.

ISO/IEC 27038:2014 PDF

Abstract

Похожие стандарты

Overview

Key Topics

Applications

Related Standards (if applicable)

Технические детали

SIST EN ISO/IEC 27038:2017

Information technology - Security techniques - Specification for digital redaction (ISO/IEC 27038:2014)

SIST EN ISO/IEC 29100:2020

Information technology - Security techniques - Privacy framework (ISO/IEC 29100:2011, including Amd 1:2018)

ISO/IEC 27001:2022/Amd 1:2024

Information security, cybersecurity and privacy protection — Information security management systems — Requir…

BS EN ISO/IEC 27017:2021

Information technology. Security techniques. Code of practice for information security controls based on ISO/…