标准编号：ISO/IEC TS 24462:2024
中文名称：信息安全、网络安全和隐私保护 安全和风险评估用本体构建块
英文名称：Information security, cybersecurity and privacy protection — Ontology building blocks for security and risk assessment
发布日期：2024-03
标准范围
This document defines an inventory of building blocks conceptually associated with different types of assessments of information and communication technology (ICT) trustworthiness. These assessments apply to areas such as governance, risk management, security evaluation, secure development lifecycle (SDL), supply chain integrity and privacy. This document also defines an ontology that organizes these building blocks and provides instructions for using the inventory of building blocks and the ontology. Formalizing the types, categories, and structural characteristics of building blocks in the area of ICT trustworthiness assessment aims to increase efficiency and improve future harmonization in standards development and their use. Building blocks can refer to structural components as well as semantic components. These components can be connected to a variety of concepts and activities related to trustworthiness assessments, including process related, such as traceability or elements of assessment methodologies.
立即下载标准文件