ГОСТ Р ИСО/МЭК 27004—2011
Библиография
(1) ISO 9000:2005*.
(2) ISO/IEC 27002:2005
Quality management systems — Fundamentals and vocabulary
(3) ISO/IEC 15504-3:2004
Information technology — Security techniques — Code of practice for information
security management
Information technology — Process assessment — Part 3. Guidance on performing an
assessment
(5) ISO/IEC 27005:2008
[
6
] ISO/TR 10017:2003*
(7) ISO Guide 99:2007*
[4] ISO/IEC 15939:2007Systems and software engineering — Measurement process
Information technology — Securitytechniques — Information securityrisk management
Guidance on statistical techniques for ISO 9001.2000
International vocabulary of metrology — Basic and general concepts and associated
terms (VIM)
(
8
) NIST SpecialPublication 800-55. Revision 1, Performance MeasurementGuide for Information Security. July 2008.
(9) ISO/IEC TR 18044:2004*Information technology — Security techniques — Information security incident
management
* Официальный перевод данного стандарта находится в Федеральном информационном фонде.
54