UNLIMITED FREE ACCESS TO THE WORLD'S BEST IDEAS

close

CSA ISO/IEC 24762

Information technology - Security techniques - Guidelines for information and communications technology disaster recovery services

inactive
Buy Now
Organization: CSA
Publication Date: 1 January 2008
Status: inactive
Page Count: 92
ICS Code (Information coding): 35.040
scope:

General

This International Standard describes the basic practices which ICT DR service providers, both in-house and outsourced, should consider.

It covers the requirements that service providers should meet, recognizing that individual organizations may have additional requirements that are specific to them (which would have to be addressed in the agreements/contracts with service providers). Examples of such organization requirements may include special encryption software and secured operation procedures, equipment, knowledgeable personnel and application documentation. Such additional organization specific requirements, if necessary, are generally negotiated on a case-by-case basis and are the subject of detailed contract negotiations between organizations and their ICT DR service providers and are not within the scope of this International Standard.

Exclusions

This International Standard does not:

a) provide any guidance on business continuity management as a whole for organizations;

b) take precedence over any laws and regulations, both existing and those in the future;

c) have any legal power over the Service Level Agreements (SLAs) included in negotiated contracts between organizations and service providers;

d) address requirements, legal or otherwise, governing normal business operations to be adhered to by service providers. Examples of such requirements include detailed regulations covering building and fire safety, occupational health and safety, copyright regulation and prevailing human resource practices;

e) provide an exhaustive list, and thus technical security controls are not covered. Readers should refer to ISO/IEC 27001 and ISO/IEC 27002, vendor literature and other technical references, as necessary.

Audience

This International Standard applies to:

a) all organizations requiring the ICT DR services as part of their business (whether in-house and/or outsourced);

b) ICT DR service providers in their provision of ICT DR services;

c) communities of organizations with reciprocal or mutual arrangements.

Document History

September 1, 2008
Information technology — Security techniques — Guidelines for information and communications technology disaster recovery services
General This International Standard describes the basic practices which ICT DR service providers, both in-house and outsourced, should consider. It covers the requirements that service providers...
CSA ISO/IEC 24762
January 1, 2008
Information technology - Security techniques - Guidelines for information and communications technology disaster recovery services
General This International Standard describes the basic practices which ICT DR service providers, both in-house and outsourced, should consider. It covers the requirements that service providers...

References

Advertisement