Reference number
ISO/IEC TR 19791:2010
© ISO 2024
Technical Report
ISO/IEC TR 19791:2010
Information technology — Security techniques — Security assessment of operational systems
Edition 2
2010-04
Technical Report
Preview
недоступно на русском языке
Опубликовано (Версия 2, 2010)
Последний раз этот публикация был пересмотрен в  2015. Поэтому данная версия остается актуальной.

ISO/IEC TR 19791:2010

Язык
Формат
CHF 216
Пересчитать швейцарские франки (CHF) в ваша валюта

Тезис

ISO/IEC TR 19791:2010 provides guidance and criteria for the security evaluation of operational systems. It provides an extension to the scope of ISO/IEC 15408 by taking into account a number of critical aspects of operational systems not addressed in ISO/IEC 15408 evaluation. The principal extensions that are required address evaluation of the operational environment surrounding the target of evaluation, and the decomposition of complex operational systems into security domains that can be separately evaluated.

ISO/IEC TR 19791:2010 provides:

  1. a definition and model for operational systems;
  2. a description of the extensions to ISO/IEC 15408 evaluation concepts needed to evaluate such operational systems;
  3. a methodology and process for performing the security evaluation of operational systems;
  4. additional security evaluation criteria to address those aspects of operational systems not covered by the ISO/IEC 15408 evaluation criteria.

ISO/IEC TR 19791:2010 permits the incorporation of security products evaluated against ISO/IEC 15408 into operational systems evaluated as a whole using ISO/IEC TR 19791:2010.

ISO/IEC TR 19791:2010 is limited to the security evaluation of operational systems and does not consider other forms of system assessment. It does not define techniques for the identification, assessment and acceptance of operational risk.

Общая информация

  • Текущий статус
     : Опубликовано
    Дата публикации
     : 2010-04
    Этап
    : Подтверждение действия международного стандарта [90.93]
  • Версия
     : 2
  • Технический комитет :
    ISO/IEC JTC 1/SC 27
    ICS :
    35.030 
  • RSS обновления

Жизненный цикл

Появились вопросы?

Ознакомьтесь с FAQ

  2. Интернет-магазин
  3. Каталог стандартов
  4. МКС
  5. 35
  6. 35.030
  7. ISO/IEC TR 19791:2010