Skip to main content

ISO/IEC TS 19608:2018

Current Date published:

Guidance for developing security and privacy functional requirements based on ISO/IEC 15408

This document provides guidance for:

— selecting and specifying security functional requirements (SFRs) from ISO/IEC 15408-2 to protect Personally Identifiable Information (PII);

— the procedure to define both privacy and security functional requirements in a coordinated manner; and

— developing privacy functional requirements as extended components based on the privacy principles defined in ISO/IEC 29100 through the paradigm described in ISO/IEC 15408-2.

The intended audience for this document are:

— developers who implement products or systems that deal with PII and want to undergo a security evaluation of those products using ISO/IEC 15408. They will get guidance how to select security functional requirements for the Security Target of their product or system that map to the privacy principles defined in ISO/IEC 29100;

— authors of Protection Profiles that address the protection of PII; and

— evaluators that use ISO/IEC 15408 and ISO/IEC 18045 for a security evaluation.

This document is intended to be fully consistent with ISO/IEC 15408; however, in the event of any inconsistency between this document and ISO/IEC 15408, the latter, as a normative standard, takes precedence.

Get this standard Prices exclude GST
PDF ( Single user document)
$248.54 NZD
HardCopy
$248.54 NZD
Networkable PDF
Price varies
Preview only close
Prev {{ page }}/ {{ numPages }} Next
Preview only close
Prev {{ page }}/ {{ numPages }} Next
Pages: 48

Keep me up-to-date

Sign up to receive updates when there are changes to this standard

Related Information

Similar Standards

  • BS 10754-1:2018

    Information technology. Systems trustworthiness, Governance and management specification

  • BS 7799-3:2017

    Information security management systems, Guidelines for information security risk management

  • BS 8626:2020

    Design and operation of online user identification systems. Code of practice

  • BS EN 16495:2019

    Air Traffic Management. Information security for organisations supporting civil aviation operations

Preview only close
Prev {{ page }}/ {{ numPages }} Next
Preview only close
Prev {{ page }}/ {{ numPages }} Next
Pages: 48

ISO/IEC TS 19608:2018

Get this standard Prices exclude GST
PDF ( Single user document)
$248.54 NZD
HardCopy
$248.54 NZD
Networkable PDF
Price varies

Request to add this standard to your subscription

ISO/IEC TS 19608:2018

Price varies
Online library subscription

Click "Send request for subscription" to request for your Account Administrator to add this standard to your subscripiton.

Comment

Cancel