New and Reviewed ISO Information Security, Cybersecurity, and Privacy Protection Standards for 2023

By /

Listen to this Post

The following ISO standards related to information security, cybersecurity, and privacy protection are expected to be published or updated this year:

  • ISO/IEC 27017: Information security controls for cloud services based on ISO/IEC 27002.
  • ISO/IEC 27018: Guidelines for protecting personally identifiable information (PII) in public clouds.
  • ISO/IEC 27028: Guidance on ISO/IEC 27002 attributes.
  • ISO/IEC 27031: ICT readiness for business continuity.
  • ISO/IEC 27090: Guidance for addressing security threats and failures in AI systems.
  • ISO/IEC 27103: Guidance on using ISO and IEC standards in a Cybersecurity Framework.
  • ISO/IEC 27404: IoT security and privacy labeling framework for consumer IoT.
  • ISO/IEC 27565: Guidelines on privacy preservation based on zero-knowledge proofs.
  • ISO/IEC 27701: Privacy information management systems requirements and guidance.
  • ISO/IEC 27706: Requirements for bodies providing audit and certification of privacy information management systems.
  • ISO/IEC 29151: Controls and guidance for PII protection.

Updates on ISO 27000, 27003, 27004, and 27109 are also anticipated but are still in early stages.

Source: ISO/IEC JTC 1/SC 27

Practice-Verified Commands and Codes

1. ISO/IEC 27017 (Cloud Security Controls)

  • Use `aws s3 cp` to securely transfer files to AWS S3 buckets with encryption enabled: 
    aws s3 cp localfile.txt s3://mybucket/ --sse AES256
  • Enable CloudTrail logging for AWS account activity: 
    aws cloudtrail create-trail --name MyTrail --s3-bucket-name MyBucket

2. ISO/IEC 27018 (PII Protection in Cloud)

  • Encrypt sensitive data using OpenSSL: 
    openssl enc -aes-256-cbc -salt -in sensitive.txt -out encrypted.txt
  • Use GPG for file encryption: 
    gpg --encrypt --recipient [email protected] file.txt

3. ISO/IEC 27090 (AI Security)

  • Monitor AI model logs for anomalies using grep: 
    grep "ERROR" ai_model.log
  • Use TensorFlow’s built-in security features to validate model integrity: 
    import tensorflow as tf
tf.saved_model.contains_saved_model('path/to/model')

4. ISO/IEC 27404 (IoT Security)

  • Scan IoT devices for vulnerabilities using Nmap: 
    nmap -sV --script=vuln 192.168.1.1
  • Use Mosquitto to secure MQTT communication: 
    mosquitto_sub -t "iot/device" -u "user" -P "password"

What Undercode Say

The evolving landscape of cybersecurity and privacy standards underscores the importance of staying updated with ISO/IEC frameworks. These standards provide a robust foundation for securing cloud services, protecting PII, ensuring AI system integrity, and safeguarding IoT devices. Implementing these standards requires a combination of policy adherence and technical execution.

For cloud security, tools like AWS CLI and OpenSSL are indispensable for encryption and logging. In AI systems, monitoring logs and validating model integrity are critical. IoT security demands proactive vulnerability scanning and secure communication protocols like MQTT.

Linux commands such as grep, openssl, and `nmap` are essential for cybersecurity professionals. Windows users can leverage PowerShell for similar tasks, such as encrypting files or monitoring network activity.

To deepen your understanding, explore the official ISO/IEC documentation and integrate these practices into your workflows. For further reading, visit the ISO/IEC JTC 1/SC 27 page.

By combining these standards with practical tools and commands, organizations can achieve compliance and enhance their cybersecurity posture.

References:

initially reported by: https://www.linkedin.com/posts/andreyprozorov_iso-iso27001-iso27701-activity-7300446145204387841-XSfr – Hackers Feeds
Extra Hub:
Undercode AIFeatured Image

Related Posts: