Quick links

AS/NZS ISO/IEC 17799:2006

Information technology - Security techniques - Code of practice for information management

NOTE: This document has been renumbered to AS/NZS ISO/IEC 27002:2006.

Provides a practical guideline for developing organizational security, standards and effective security management practices and to help build confidence in inter-organisational activities. Identical to and reproduced from ISO/IEC 17799:2005.

Publishing Information:

Comments:

Renumbered to become AS/NZS ISO/IEC 27002:2006 by Amendment 1:2008 to AS/NZS ISO/IEC 17799:2006, which is incorporated in the renumbered Standard.

ICS Codes:

References:

Standards NZ References:

• NO NZ CROSS REFERENCES

Non Standards NZ References:

• IEEE P1363-2000: Standard Specifications for Public-Key Cryptography


• ISO 10007:2003 Quality management systems - Guidelines for configuration management


• ISO 15489-1:2001 Information and documentation - Records management - Part 1: General


• ISO 19011:2002 Guidelines for quality and /or environmental management systems auditing OECD Guidelines for the Security of Information Systems and Networks: ‘Towards a Culture of Security’, 2002


• ISO/IEC 11770-1:1996 Information technology - Security techniques - Key management - Part 1: Framework


• ISO/IEC 12207:1995 Information technology - Software life cycle processes


• ISO/IEC 13335-1:2004, Information technology - Security techniques - Management of information and communications technology security - Part 1: Concepts and models for information and communications technology security management


• ISO/IEC 13888-1: 1997, Information technology - Security techniques - Non-repudiation - Part 1: General


• ISO/IEC 14516:2002 Information technology - Security techniques - Guidelines for the use and management of Trusted Third Party services


• ISO/IEC 14888-1:1998 Information technology - Security techniques - Digital signatures with appendix - Part 1: General


• ISO/IEC 15408-1:1999 Information technology - Security techniques - Evaluation Criteria for IT security - Part 1: Introduction and general model


• ISO/IEC 18028-4 Information technology - Security techniques - IT Network security - Part 4: Securing remote access


• ISO/IEC 9796-2:2002 Information technology - Security techniques - Digital signature schemes giving message recovery - Part 2: Integer factorization based mechanisms


• ISO/IEC 9796-3:2000 Information technology - Security techniques - Digital signature schemes giving message recovery - Part 3: Discrete logarithm based mechanisms


• ISO/IEC Guide 2:1996, Standardization and related activities - General vocabulary


• ISO/IEC Guide 73:2002, Risk management - Vocabulary - Guidelines for use in standards


• ISO/IEC TR 13335-3:1998, Information technology - Guidelines for the Management of IT Security - Part 3: Techniques for the management of IT Security


• ISO/IEC TR 18044 Information technology - Security techniques - Information security incident management


• OECD Guidelines for Cryptography Policy, 1997