ISO/IEC 19944:2017
Information technology — Cloud computing — Cloud services and devices: Data flow, data categories and data use
ISO/IEC 19944:2017
- extends the existing cloud computing vocabulary and reference architecture in ISO/IEC 17788 and ISO/IEC 17789 to describe an ecosystem involving devices using cloud services,
- describes the various types of data flowing within the devices and cloud computing ecosystem,
- describes the impact of connected devices on the data that flow within the cloud computing ecosystem,
- describes flows of data between cloud services, cloud service customers and cloud service users,
- provides foundational concepts, including a data taxonomy, and
- identifies the categories of data that flow across the cloud service customer devices and cloud services.
ISO/IEC 19944:2017 is applicable primarily to cloud service providers, cloud service customers and cloud service users, but also to any person or organization involved in legal, policy, technical or other implications of data flows between devices and cloud services.
| Get this standard | Prices exclude GST | |
|---|---|---|
| PDF ( Single user document) |
$118.26 NZD
|
|
| HardCopy |
$152.17 NZD
|
|
| Networkable PDF |
Price varies
|
Foreword
Introduction
1 Scope
2 Normative references
3 Terms and definitions
4 Abbreviated terms
5 Structure of this document
6 Overview of devices and cloud services ecosystems
6.1 Background and context — Impact of devices and personalized cloud services
6.2 Ecosystem of devices and cloud services
6.3 Devices and multiple user sub-roles
6.3.1 General
6.3.2 Bring your own device (BYOD)
7 Extending the CCRA to the devices and cloud services ecosystem
7.1 Overview
7.2 Personal and organizational environments
7.3 Device impact on the CCRA: User view
7.3.1 Cloud service provider
7.3.2 Cloud service customer
7.4 Device impact on the CCRA: Functional view
7.4.1 General
7.4.2 Functional components in the functional view
7.4.3 Functional view: Data flows
8 Data taxonomy
8.1 Overview
8.2 Data categories
8.2.1 General
8.2.2 Customer content data
8.2.3 Derived data
8.2.4 Cloud service provider data
8.2.5 Account data
8.3 Data identification qualifiers
8.3.1 General
8.3.2 Identified data
8.3.3 Pseudonymized data
8.3.4 Unlinked pseudonymized data
8.3.5 Anonymized data
8.3.6 Aggregated data
9 Data processing and use categories
9.1 Overview
9.2 Data processing categories
9.2.1 General
9.2.2 Data partitioning
9.2.3 Data integration
9.2.4 Data fusion
9.2.5 Data improvement
9.2.6 Encryption
9.2.7 Replication
9.2.8 Data Deletion
9.2.9 Re-identification
9.3 Data use categories
9.3.1 General
9.3.2 Provide
9.3.3 Improve
9.3.4 Personalize
9.3.5 Offer upgrades or upsell
9.3.6 Market/advertise/promote
9.3.7 Share
9.4 Scopes: Boundaries of collection and use of data
9.4.1 Scope concepts
9.4.2 Scope types
10 Data use statements
10.1 Overview
10.2 Data use statement structure
10.2.1 Structure definition
10.2.2 Describing the scope of applications and cloud services that apply to use statements
10.2.3 Assumptions about when data is collected and used
10.2.4 Defining promotion targets
10.2.5 Data types
10.2.6 Data qualifiers for data types
10.2.7 Examples of statements about data flow in the devices and cloud services ecosystem
10.2.8 Exceptional use statements
Annex A (informative) Diagrams of data categories and data identification qualifiers
Bibliography
Keep me up-to-date
Register to receive notifications when updates are made to this standard.
Related Information
Similar Standards
-
BS ISO/IEC 17826:2016
Information technology. Cloud Data Management Interface (CDMI)
-
BS ISO/IEC 17826:2022
Information technology. Cloud Data Management Interface (CDMITM) Version 2.0
-
BS ISO/IEC 18384-1:2016
Information technology. Reference Architecture for Service Oriented Architecture (SOA RA), Terminology and concepts for SOA
-
BS ISO/IEC 18384-2:2016
Information technology. Reference Architecture for Service Oriented Architecture (SOA RA), Reference Architecture for SOA Solutions
Foreword
Introduction
1 Scope
2 Normative references
3 Terms and definitions
4 Abbreviated terms
5 Structure of this document
6 Overview of devices and cloud services ecosystems
6.1 Background and context — Impact of devices and personalized cloud services
6.2 Ecosystem of devices and cloud services
6.3 Devices and multiple user sub-roles
6.3.1 General
6.3.2 Bring your own device (BYOD)
7 Extending the CCRA to the devices and cloud services ecosystem
7.1 Overview
7.2 Personal and organizational environments
7.3 Device impact on the CCRA: User view
7.3.1 Cloud service provider
7.3.2 Cloud service customer
7.4 Device impact on the CCRA: Functional view
7.4.1 General
7.4.2 Functional components in the functional view
7.4.3 Functional view: Data flows
8 Data taxonomy
8.1 Overview
8.2 Data categories
8.2.1 General
8.2.2 Customer content data
8.2.3 Derived data
8.2.4 Cloud service provider data
8.2.5 Account data
8.3 Data identification qualifiers
8.3.1 General
8.3.2 Identified data
8.3.3 Pseudonymized data
8.3.4 Unlinked pseudonymized data
8.3.5 Anonymized data
8.3.6 Aggregated data
9 Data processing and use categories
9.1 Overview
9.2 Data processing categories
9.2.1 General
9.2.2 Data partitioning
9.2.3 Data integration
9.2.4 Data fusion
9.2.5 Data improvement
9.2.6 Encryption
9.2.7 Replication
9.2.8 Data Deletion
9.2.9 Re-identification
9.3 Data use categories
9.3.1 General
9.3.2 Provide
9.3.3 Improve
9.3.4 Personalize
9.3.5 Offer upgrades or upsell
9.3.6 Market/advertise/promote
9.3.7 Share
9.4 Scopes: Boundaries of collection and use of data
9.4.1 Scope concepts
9.4.2 Scope types
10 Data use statements
10.1 Overview
10.2 Data use statement structure
10.2.1 Structure definition
10.2.2 Describing the scope of applications and cloud services that apply to use statements
10.2.3 Assumptions about when data is collected and used
10.2.4 Defining promotion targets
10.2.5 Data types
10.2.6 Data qualifiers for data types
10.2.7 Examples of statements about data flow in the devices and cloud services ecosystem
10.2.8 Exceptional use statements
Annex A (informative) Diagrams of data categories and data identification qualifiers
Bibliography