NZS 6656:1995
Code of practice for the implementation and operation of a trustworthy computer system
This Standard specifies security requirements for use where a contract between two parties requires the demonstration of a supplier`s capability to implement and/or operate a computer system, such as in an outsourcing arrangement, which enforces information confidentiality, integrity, and availability. It applies equally to system acquisition, where the two parties are the system purchaser and the supplier; to facilities management, where the two parties are the system owner (purchaser) and the facilities management provider (supplier); or internal provision of systems and services, where the two parties are the organization`s business units (purchasers) and the organization`s data processing unit (supplier).
| Get this standard | Prices exclude GST | |
|---|---|---|
| PDF ( Single user document) |
$77.40 NZD
|
|
| Networkable PDF |
Price varies
|
|
| Online Library ( Annual subscription) |
Info
Price varies
Online Library subscription information Online library subscriptions provide a cost-effective solution for organisations of any size to access the latest standards, offering 24/7 access to a personalised catalogue. The service ensures subscribers have have the most up-to-date version of selected standards, incluing automatic updates for any amendments or versions. Pricing is dependent on the chosen standards and the number of concurrent users, with discounts applied from the standards PDF price. For customised subscriptions or further inquiries, contact the Online Library team. |
COMMITTEE REPRESENTATION
© COPYRIGHT
CONTENTS
RELATED DOCUMENTS
FOREWORD
REVIEW OF STANDARDS
1 GENERAL
1.1 Scope
2 MANAGEMENT REQUIREMENTS
2.1 Security policy
2.2 Responsibility and authority
2.3 Verification resources
2.4 Management representatives
2.5 Management review
3 SECURITY SYSTEM
3.1 General
3.2 Physical security
3.3 Personnel security
3.4 Network security
3.5 Computer security
3.6 Document control
3.7 Inspection and testing
3.8 Configuration management
3.9 Corrective action
3.10 Security records
3.11 Internal security audits
3.12 Training
3.13 Business continuity plan
STANDARDS COUNCIL APPROVAL
Keep me up-to-date
Sign up to receive updates when there are changes to this standard
Related Information
Similar Standards
-
AS/NZS 10002:2014
Guidelines for complaint management in organizations
-
AS/NZS 3802:1997
Data elements and interchange formats - Information interchange - Representation of dates and times
-
AS/NZS 3905.16:1998
Quality system guidelines - Guidelines to quality in project management
-
AS/NZS 3907:1996
Quality management - Guidelines for configuration management
COMMITTEE REPRESENTATION
© COPYRIGHT
CONTENTS
RELATED DOCUMENTS
FOREWORD
REVIEW OF STANDARDS
1 GENERAL
1.1 Scope
2 MANAGEMENT REQUIREMENTS
2.1 Security policy
2.2 Responsibility and authority
2.3 Verification resources
2.4 Management representatives
2.5 Management review
3 SECURITY SYSTEM
3.1 General
3.2 Physical security
3.3 Personnel security
3.4 Network security
3.5 Computer security
3.6 Document control
3.7 Inspection and testing
3.8 Configuration management
3.9 Corrective action
3.10 Security records
3.11 Internal security audits
3.12 Training
3.13 Business continuity plan
STANDARDS COUNCIL APPROVAL
NZS 6656:1995
Online Library subscription information
Online library subscriptions provide a cost-effective solution for organisations of any size to access the latest standards, offering 24/7 access to a personalised catalogue. The service ensures subscribers have have the most up-to-date version of selected standards, incluing automatic updates for any amendments or versions. Pricing is dependent on the chosen standards and the number of concurrent users, with discounts applied from the standards PDF price. For customised subscriptions or further inquiries, contact the Online Library team.