The development of standards for the protection of information and ICT. This includes generic methods, techniques and guidelines to address both security and privacy aspects, such as:
The committees below can access the documents of ISO/IEC JTC 1/SC 27 :
| Reference | Title | ISO/IEC |
|---|---|---|
| IEC/SC 45A | Instrumentation, control and electrical power systems of nuclear facilities | IEC |
| IEC/TC 57 | Power systems management and associated information exchange | IEC |
| IEC/TC 65 | Industrial-process measurement, control and automation | IEC |
| ISO/CASCO | Committee on conformity assessment | ISO |
| ISO/IEC JTC 1 | Information technology | ISO/IEC |
| ISO/IEC JTC 1/SC 6 | Telecommunications and information exchange between systems | ISO/IEC |
| ISO/IEC JTC 1/SC 7 | Software and systems engineering | ISO/IEC |
| ISO/IEC JTC 1/SC 17 | Cards and security devices for personal identification | ISO/IEC |
| ISO/IEC JTC 1/SC 22 | Programming languages, their environments and system software interfaces | ISO/IEC |
| ISO/IEC JTC 1/SC 29 | Coding of audio, picture, multimedia and hypermedia information | ISO/IEC |
| ISO/IEC JTC 1/SC 31 | Automatic identification and data capture techniques | ISO/IEC |
| ISO/IEC JTC 1/SC 36 | Information technology for learning, education and training | ISO/IEC |
| ISO/IEC JTC 1/SC 37 | Biometrics | ISO/IEC |
| ISO/IEC JTC 1/SC 38 | Cloud Computing and Distributed Platforms | ISO/IEC |
| ISO/IEC JTC 1/SC 40 | IT Service Management and IT Governance | ISO/IEC |
| ISO/PC 302 | Guidelines for auditing management systems | ISO |
| ISO/TC 8 | Ships and marine technology | ISO |
| ISO/TC 22/SC 32 | Electrical and electronic components and general system aspects | ISO |
| ISO/TC 46/SC 11 | Archives/records management | ISO |
| ISO/TC 68/SC 2 | Financial Services, security | ISO |
| ISO/TC 171 | Document management applications | ISO |
| ISO/TC 176/SC 1 | Concepts and terminology | ISO |
| ISO/TC 176/SC 3 | Supporting technologies | ISO |
| ISO/TC 204 | Intelligent transport systems | ISO |
| ISO/TC 215 | Health informatics | ISO |
| ISO/TC 251 | Asset management | ISO |
| ISO/TC 262 | Risk management | ISO |
| ISO/TC 272 | Forensic sciences | ISO |
| ISO/TC 292 | Security and resilience | ISO |
| ISO/TC 307 | Blockchain and distributed ledger technologies | ISO |
| ISO/TC 309 | Governance of organizations | ISO |
ISO/IEC JTC 1/SC 27 can access the documents of the committees below :
| Reference | Title | ISO/IEC |
|---|---|---|
| ISO/CASCO | Committee on conformity assessment | ISO |
| ISO/IEC JTC 1 | Information technology | ISO/IEC |
| ISO/IEC JTC 1/SC 6 | Telecommunications and information exchange between systems | ISO/IEC |
| ISO/IEC JTC 1/SC 7 | Software and systems engineering | ISO/IEC |
| ISO/IEC JTC 1/SC 17 | Cards and security devices for personal identification | ISO/IEC |
| ISO/IEC JTC 1/SC 22 | Programming languages, their environments and system software interfaces | ISO/IEC |
| ISO/IEC JTC 1/SC 25 | Interconnection of information technology equipment | ISO/IEC |
| ISO/IEC JTC 1/SC 29 | Coding of audio, picture, multimedia and hypermedia information | ISO/IEC |
| ISO/IEC JTC 1/SC 31 | Automatic identification and data capture techniques | ISO/IEC |
| ISO/IEC JTC 1/SC 36 | Information technology for learning, education and training | ISO/IEC |
| ISO/IEC JTC 1/SC 37 | Biometrics | ISO/IEC |
| ISO/IEC JTC 1/SC 38 | Cloud Computing and Distributed Platforms | ISO/IEC |
| ISO/IEC JTC 1/SC 40 | IT Service Management and IT Governance | ISO/IEC |
| ISO/PC 302 | Guidelines for auditing management systems | ISO |
| ISO/TC 22/SC 32 | Electrical and electronic components and general system aspects | ISO |
| ISO/TC 46/SC 11 | Archives/records management | ISO |
| ISO/TC 68/SC 2 | Financial Services, security | ISO |
| ISO/TC 171 | Document management applications | ISO |
| ISO/TC 176/SC 3 | Supporting technologies | ISO |
| ISO/TC 204 | Intelligent transport systems | ISO |
| ISO/TC 215 | Health informatics | ISO |
| ISO/TC 251 | Asset management | ISO |
| ISO/TC 262 | Risk management | ISO |
| ISO/TC 292 | Security and resilience | ISO |
| ISO/TC 309 | Governance of organizations | ISO |
| Acronym | Title | Category |
|---|---|---|
| (ISC)2 | International Information Systems Security Certification Consortium, Inc. | A |
| CCETT | Common Study Center of Telediffusion and Telecommunication | A |
| Cloud security alliance | Cloud security alliance | A |
| ECBS | European Committee for Banking Standards | A |
| Ecma International | Ecma International | A |
| ENISA | European Network and Information Security Agency | A |
| EPC | Conseil Européen des Paiements AISBL | A |
| ETSI | European Telecommunications Standards Institute | A |
| Global Platform - Global Platform Inc. | Global Platform Inc. | A |
| IEEE | Institute of Electrical and Electronics Engineers, Inc | A |
| ISACA | Information Systems Audit and Control Association | A |
| ISSEA | International Systems Security Engineering Association | A |
| ITU | International Telecommunication Union | A |
| MasterCard | MasterCard International | A |
| SBS - Small Business Standards | Small Business Standards | A |
C & D liaisons participate at the level of a Working Group
| Acronym | Title | Category |
|---|---|---|
| (ISC)2 | International Information Systems Security Certification Consortium, Inc. | C |
| ABC4Trust | ABC4Trust - Attribute-based Credentials for Trust | C |
| Article 29 Data Protection Working Party | Article 29 Data Protection Working Party | C |
| CCDB | Common Criteria Development Board | C |
| CREDENTIAL | seCuRE clouD idENTIty wALlet | C |
| CSCC | Cloud Standards Customer Council | C |
| Cyber Security | The Cyber Security Naming & Information Structure Groups | C |
| ETSI | European Telecommunications Standards Institute | C |
| EUDCA | European Data Centre Association | C |
| EuroCloud | EuroCloud | C |
| FIRST | Forum of Incident Response and Security Teams | C |
| INLAC | Latinoamerican Institute for Quality Assurance | C |
| Interpol | Interpol | C |
| ISA - Automation | The International Society of Automation | C |
| ISCI | International Smart card Certification Intiatives | C |
| ISF | Information Security Forum | C |
| Kantara Initiative | Kantara Initiative | C |
| OASIS-PMRM | OASIS Privacy Management Reference Model | C |
| OECD | Organisation for Economic Co-operation and Development, OECD | C |
| OIDF | The OpenID Foundation | C |
| Opengroup, United Kingdom | Opengroup | C |
| PICOS | Privacy and Identity Management for Community Services | C |
| PQCRYPTO | Post-quantum cryptography for long-term security | C |
| PRIPARE | PReparing Industry to Privacy-by-design by supporting its Application in REsearch | C |
| PRISMACLOUD | Privacy and Security Maintaining Services in the Cloud | C |
| SAFEcrypto | Secure Architectures of Future Emerging Cryptography | C |
| TAS3 | Interdisciplinary Centre for Law and ICT (ICRI), | C |
| TCG | Trusted Computing Group | C |
| TMForum | TeleManagement Forum | C |
| TREsPASS | Technology-supported Risk Estimation by Predictive Assessment of Socio technical Security | C |
| WITDOM | empoWering prIvacy and securiTy in non-trusteD envirOnMents | C |
| Date | Month | Location | TC/SC | Note |
|---|---|---|---|---|
| 23-24 | April 2018 | Wuhan (China) | ISO/IEC JTC 1/SC 27 |
* Information definite but meeting not yet formally convened
** Provisional