AS/NZS 4444.2:2000

AS/NZS 4444.2:2000 INFORMATION SECURITY MANAGEMENT - SPECIFICATION FOR INFORMATION SECURITY MANAGEMENT SYSTEMS

Preface

Contents

1 Scope

2 Terms and definitions

2.1 Statement of applicability

3 Information security management system requirements

3.1 General

3.2 Establishing a management framework

3.3 Implementation

3.4 Documentation

3.5 Document control

3.6 Records

4 Detailed controls

4.1 Security policy

4.1.1 Information security policy

4.2 Security organization

4.2.1 Information security infrastructure

4.2.2 Security of third party access

4.2.3 Outsourcing

4.3 Asset classification and control

4.3.1 Accountability for assets

4.3.2 Information classification

4.4 Personnel security

4.4.1 Security in job definition and resourcing

4.4.2 User training

4.4.3 Responding to security incidents and malfunctions

4.5 Physical and environmental security

4.5.1 Secure areas

4.5.2 Equipment security

4.5.3 General controls

4.6 Communications and operations management

4.6.1 Operational procedures and responsibilities

4.6.2 System planning and acceptance

4.6.3 Protection against malicious software

4.6.4 Housekeeping

4.6.5 Network management

4.6.6 Media handling and security

4.6.7 Exchanges of information and software

4.7 Access control

4.7.1 Business requirement for access control

4.7.2 User access management

4.7.3 User responsibilities

4.7.4 Network access control

4.7.5 Operating system access control

4.7.6 Application access control

4.7.7 Monitoring system access and use

4.7.8 Mobile computing and teleworking

4.8 Systems development and maintenance

4.8.1 Security requirements of systems

4.8.2 Security in application systems

4.8.3 Cryptographic controls

4.8.4 Security of system files

4.8.5 Security in development and support processes

4.9 Business continuity management

4.9.1 Aspects of business continuity management

4.10 Compliance

4.10.1 Compliance with legal requirements

4.10.2 Review of security policy and technical compliance

4.10.3 System audit consideration