Grunnpakke 2 for cybersikkerhet

Standardene i Grunnpakke 2 har en utvidet funksjon som går lenger og som inkluderer hjelp til å implementere kontrollfunksjoner for å forebygge mot cybersikkerhetsrisikoer, hvor blant annet standarder for Cloud inngår og hvor personlig sensitiv informasjon skal håndteres ut fra GDPR-kravene, samt Information security governance.

Grunnpakke 2

NS/IEC ISO 29100 Information technology — Security techniques — Privacy framework + Amendment 1

NS ISO/IEC 29134 Information technology -- Security techniques -- Guidelines for privacy impact assessment

NS-ISO/IEC 27017 Information technology — Security techniques — Code of practice for information security controls based on ISO/IEC 27002 for cloud services

NS-ISO/IEC 27018 Information technology — Security techniques — Code of practice for protection of Personally Identifiable Information (PII) in public clouds acting as PII processors

NS-ISO/IEC 27014 Information security governance

NS-ISO/IEC 27031 Guidelines for information and communication technology readiness for business continuity

NS-ISO/IEC 27035 Information technology — Security techniques — Information security incident management (parts 1 & 2 published)

NS-ISO/IEC 27036 Information technology — Security techniques — Information security for supplier relationships (four parts)