ČSN EN ISO/IEC 27041 (369850)

The category - similar standards:

IT Security

Annotation of standard text ČSN EN ISO/IEC 27041 (369850):

This International Standard provides guidance on mechanisms for ensuring that methods and processes used in the investigation of information security incidents are "fit for purpose". It en-capsulates best practice on defining requirements, describing methods, and providing evidence that implementations of methods can be shown to satisfy requirements. It includes consideration of how vendor and third-party testing can be used to assist this assurance process. This do-cument aims to

- provide guidance on the capture and analysis of functional and non-functional requirements relating to an Information Security (IS) incident investigation,

- give guidance on the use of validation as a means of assuring suitability of processes involved in the investigation,

- provide guidance on assessing the levels of validation required and the evidence required from a validation exercise,

- give guidance on how external testing and documentation can be incorporated in the validation process