ISO Focus - May 2007
Information Technology - Security and Quality
The functioning of the global economy in general and so many aspects of our daily lives are largely dependent on information technology. Sectors like finance, medical administration, emergency services, telecommunications and e-business, as well as government services like taxation are just a few areas where information technology plays an important role. Increasingly, organizations and their information systems and networks are faced with a variety of security threats from a number of sources, including computer-assisted fraud, espionage, sabotage, vandalism, fire or flood. Sources of damage such as computer viruses, computer hacking and denial of service attacks have become more common, more ambitious and increasingly sophisticated.
“There is no doubt that the protection of our information in systems and over networks is a critical business issue that needs immediate and ongoing attention,” says Ted Humphreys, Convenor of working group WG 1, Requirements, services and guidelines , one of three working groups within ISO/IEC JTC 1/SC 27, IT security techniques. “Information has become one of the critical commodities in today’s fast moving e-biz world.”
ISO/IEC standards for IT security help and guide management at all levels, as well as technical authorities to manage the risks to minimize any potential damage or loss to their business information and system resources. In a series of articles the best experts worldwide in this field will discuss all the latest developments in standards for information security and quality for IT.
Comment
Dr. Walter Fumy, Chairman of ISO/IEC JTC 1/SC 27, IT security techniques. Dr. Fumy works for Medical Solutions, Siemens, AG, Munich.
Information technology - Security and quality
Guest view
Nandan Nilekani
CEO and Managing Director, Infosys Technologies
"ISO provided the basic foundation for our quality system."
Main Focus
Managing Information Security
- Managing information security
- Electronic commerce and identity access management
- Incident handling and disaster recovery services
- Security product and technology assurance
- Software and system engineering
- Shaping the software agenda
- ISO/IEC 90003 – The quality improvement tool engineering
- ISO/IEC 19770 and the software industry
- The first year: An update on ISO/IEC 20000
- ISO/IEC 25000 SQuaRE series of standards
Developments and initiatives
- ISO/TC 37 Terminology and Language
How the ISO 639 series of standards will soon be able to help to reflect the diversity of the world’s languages on the web.
- ISO and IEEE – Standard software and systems engineering
Standard software and systems engineering terminology is now freely available in an online database, SEVOCAB.
- ISO/IEC structuring and designation standards – a framework for industry
How the IEC 61346 series of standards provides structuring principles for all industrial products, systems, installations and equipment.
World Scene
Highlights of events from around the world
ISO Scene
Highlights of news from ISO



