ISO/IEC TS 27100:2020 PDF

Name: ISO/IEC TS 27100:2020 — Information technology — Cybersecurity — Overview and concepts
SKU: ISO/IEC TS 27100:2020
Price: 25 EUR
Availability: InStock

Information technology — Cybersecurity — Overview and concepts

Название (английский):

ISO/IEC TS 27100:2020

Information technology — Cybersecurity — Overview and concepts

Статус документа:: Действующий
Формат:: Электронный (PDF)
Количество страниц:: 17
Дата публикации:: 22 декабря 2020 г.
Издание:: ISO/IEC TS 27100 edition 1 version 1
ICS:: 35.030

Тип поставки:

Full version255 €Read online 24h10 €Read online 72h15 €

Язык документа:

ruen

Срок поставки:3 раб. дн. (перевод)

Цена:255 €

Описание (английский):

This document provides an overview of cybersecurity. This document: — describes cybersecurity and relevant concepts, including how it is related to and different from information security; — establishes the context of cybersecurity; — does not cover all terms and definitions applicable to cybersecurity; and — does not limit other standards in defining new cybersecurity-related terms for use. This document is applicable to all types and sizes of organization (e.g. commercial enterprises, government agencies, not-for-profit organizations).

Abstract

Похожие стандарты

Стандарты, упомянутые в описании

Overview - ISO/IEC TS 27100:2020 (Cybersecurity - Overview and concepts)

ISO/IEC TS 27100:2020 is a technical specification that provides a concise overview of cybersecurity and the core concepts organizations need to understand cyber risk. Rather than prescribing controls, this ISO/IEC TS establishes the context of cyberspace and cybersecurity, clarifies how cybersecurity relates to information security and ISMS, and defines key terms (e.g., cyberspace, cyber threat, cyber incident). It is applicable to all types and sizes of organizations - from SMEs to governments and critical infrastructure operators.

Key topics and concepts

The document covers foundational topics useful for building a cybersecurity program and for aligning with other standards:

Definitions and vocabulary - clear terms for cyber attack, cybersecurity event/incident, cyberspace, cyber threat and risk (aligned with ISO/IEC 27000 family).

Cyberspace characteristics - borderless, interconnected environment with asymmetric and near‑instant impacts.

Relationship to information security and ISMS - differences in scope and objectives; how ISMS supports cybersecurity and how cyberspace introduces additional risk sources.

Risk management in a cyber context - threat and risk identification tailored to cyberspace.

Cyber threats by sector - considerations for business organizations, industrial control systems, products/services/supply chains, telecoms/ISPs, public authorities, critical infrastructure and individuals.

Incident management and coordination - incident detection, organizational response, cross‑organizational coordination and supplier technical support.

Framework and safety considerations - interaction between cybersecurity frameworks, safety, and cyber insurance.

Layered model of cyberspace - conceptual models (informative annex) to visualize relationships among networks, services, people and processes.

Practical applications - who uses this standard

ISO/IEC TS 27100:2020 is a reference document intended for those who need conceptual clarity and context before selecting or implementing controls:

CISOs, security leaders and risk managers establishing cybersecurity strategy or aligning programs to international best practice.

ISMS implementers and auditors who need to distinguish information security and cybersecurity scopes.

Policy makers and regulators developing cyber policy, sectoral guidance or national strategies.

Product and service suppliers, system integrators and telecommunication providers assessing supply‑chain and service risks.

Operators of critical infrastructure, industrial control systems and public authorities planning incident response and cross‑organizational coordination.

Related standards

ISO/IEC 27000 (vocabulary and overview for information security)

ISO/IEC 27001 (Information Security Management System - requirements)

ISO/IEC 27035-1 (incident management guidance)

ISO/IEC 27102 (related cyberspace terminology)

ISO/IEC TS 27100:2020 is a practical, standards‑based primer for organizations that need a clear conceptual foundation in cybersecurity and cyber risk management.

ISO/IEC TS 27100:2020 PDF

Abstract

Похожие стандарты

Overview - ISO/IEC TS 27100:2020 (Cybersecurity - Overview and concepts)

Key topics and concepts

Practical applications - who uses this standard

Related standards

Технические детали

BS EN ISO/IEC 27000:2020

Information technology. Security techniques. Information security management systems. Overview and vocabulary

ISO/IEC 27001:2022/Amd 1:2024

Information security, cybersecurity and privacy protection — Information security management systems — Requir…

BS ISO/IEC 27035-1:2016

Information technology. Security techniques. Information security incident management - Principles of inciden…

ISO/IEC 27102:2019

Information security, cybersecurity and privacy protection — Guidelines for applying ISO/IEC 27001 and relate…