MANAGEMENT OF DEFENSE INDUSTRY’S INFORMATION SECURITY IN THE CONTEXT OF THE ISO/IEC 27001:2013 STANDARD

Sukhanov A V; Smirnov A S; Khitov S B

doi:doi:

Home / Journals / Scientific and analytical journal «Vestnik Saint-Petersburg university of State fire service of EMERCOM of Russia» / Volume 2017 Issue 1 / MANAGEMENT OF DEFENSE INDUSTRY’S INFORMATION SECURITY IN THE CONTEXT OF THE ISO/IEC 27001:2013 STANDARD

MANAGEMENT OF DEFENSE INDUSTRY’S INFORMATION SECURITY IN THE CONTEXT OF THE ISO/IEC 27001:2013 STANDARD

Submit manuscript

To cite

Citations:

MANAGEMENT OF DEFENSE INDUSTRY’S INFORMATION SECURITY IN THE CONTEXT OF THE ISO/IEC 27001:2013 STANDARD

Journal: SCIENTIFIC AND ANALYTICAL JOURNAL «VESTNIK SAINT-PETERSBURG UNIVERSITY OF STATE FIRE SERVICE OF EMERCOM OF RUSSIA» Volume 2017 № 1 , 2017

Rubrics: RISKS REDUCTION AND ELIMINATION OF CONSEQUENCES OF EMERGENCIES. SAFETY ENSURING AT EMERGENCY SITUATIONS

Sukhanov A V ¹

Smirnov A S ²

Khitov S B ³

Author and publication information

Authors:

1. ZAO «EURICA»

2. National crisis management center of EMERCOM of Russia

3. Saint-Petersburg university of State fire service of EMERCOM of Russia

Type:

Article

Pages:

from 9 to 16

Status:

Published

Received:

12.03.2017

Accepted:

20.03.2017

Published:

25.03.2017

Language:

Russian

Keywords:

ISO/IEC 27001:2013, information security, information security managementsystem

Abstract and keywords

Abstract (English):
The main clauses of the new international standard for information security management - ISO/IEC 27001:2013, in comparing with ISO/IEC 27001:2005 are considered in the article. This standard is basis of creation an information security management system for any organization.

Keywords:
ISO/IEC 27001:2013, information security, information security managementsystem

References

1. Smirnova O.G., Hitov S.B. Pravovye osnovy zaschity informacionnyh sistem Rossiyskoy Federacii ot komp'yuternyh atak // Pravo. Bezopasnost'. Chrezvychaynye situacii. 2016. № 1 (30). S. 38-42.

2. Vasil'eva I.N. Upravlenie informacionnoy bezopasnost'yu: ucheb. posobie. SPb.: Izd-vo SPbGEU, 2014. 82 s.

3. Eremenko S.P., Hitov S.B., Mozhaev O.A. Analiz normativno-pravovoy bazy dlya zadachi formirovaniya modeli i metoda ocenki rezul'tativnosti SMIB v organizaciyah MChS Rossii // Problemy upravleniya riskami v tehnosfere. 2015. № 4 (36). S. 101-107.

4. Eremenko S.P., Hitov S.B. Ocenka rezul'tativnosti kak vazhneyshiy aspekt postroeniya sistemy obespecheniya informacionnoy bezopasnosti v sisteme raspredelennyh situacionnyh centrov MChS Rossii // Nauch.-analit. zhurn. «Vestnik S.-Peterb. un-ta GPS MChS Rossii». 2016. № 2. S. 84-90.

5. GOST R ISO/MEK 27001-2006. Informacionnaya tehnologiya. Metody i sredstva obespecheniya bezopasnosti. Sistemy menedzhmenta informacionnoy bezopasnosti. Trebovaniya. M.: Gosstandart Rossii. 2008. 31 s.

6. ISO/IECDirectives, Part 1ConsolidatedISOSupplement - Procedures specificto ISO. Seventhedition, 2016. URL: http://isotc.iso.org/livelink/livelink/fetch/2000/2122/4230450/4230452/ ISO_IEC_Directives_Part_1_and_Consolidated_ISO_Supplement_%2D_2016_%287th_edition%2 9_%2D_PDF.pdf?nodeid=17668772&vernum=-2 (data obrascheniya: 28.06.2016).

7. Transitionguide. MovingfromISO/IEC 27001:2005 toISO/IEC 27001:2013.BSIGROUP, UnitedKingdom. 16 p.

8. Mezhdunarodnyy standart ISO/IEC 27000. 3-e izd. URL: http://pqm- online.com/assets/files/lib/std/iso-mek-27000-2014.pdf (data obrascheniya: 28.06.2016).

Submit manuscript

To cite

Citations:

Confirmation

Регистрация