Norm: ISO/IEC 27013

Beschreibung

Hinweis: Verweis auf ISO/IEC 27013 DAM 1:2023-09 - Entwurf - Änderung 1 (Link zum Herausgeber)

Contents

Foreword
Introduction

1 Scope

2 Normative references

3 Terms and definitions

4 Overview of and

Understanding and
concepts
concepts
Similarities and differences

5 Approaches for integrated implementation

General

Considerations of scope

Pre-implementation scenarios

General
Neither standard is currently used as the basis for a management system
The management system fulfils the requirements of one of the standards
Separate management systems exist which fulfil the requirements of each standard

6 Integrated implementation considerations

General

Potential challenges

Requirements and controls
Assets and configuration items
Service design and transition
Risk assessment and management
Risk and other parties
Incident management
Problem management
Gathering of evidence
Major incident management
Classification and escalation of incidents
Change management

Potential gains

Service level management and reporting
Management commitment and continual improvement
Capacity management
Management of third parties and related risk
Continuity and availability management
Release and deployment management

AA - Correspondence between , and (informative)

AB - Correspondence between the controls in , and the requirements in (informative)

AC - Comparison of terms and definitions between and (informative)

Bibliography