iTeh StandardsiTeh Standards
EURUSD
Your shopping cart is empty.
ISO

ISO/IEC 27021:2017/Amd 1:2021

(Amendment)

Information technology — Security techniques — Competence requirements for information security management systems professionals — Amendment 1: Addition of ISO/IEC 27001:2013 clauses or subclauses to competence requirements

Information technology — Security techniques — Competence requirements for information security management systems professionals — Amendment 1: Addition of ISO/IEC 27001:2013 clauses or subclauses to competence requirements

Technologies de l'information — Techniques de sécurité — Exigences de compétence pour les professionnels de la gestion des systèmes de management de la sécurité — Amendement 1: Ajout d'articles ou de paragraphes de l'ISO/IEC 27001:2013 aux exigences en matière de compétence

General Information

Status
Published
Publication Date
01-Dec-2021
ICS
35.030 - IT Security
Technical Committee
ISO/IEC JTC 1/SC 27 - Information security, cybersecurity and privacy protection
Drafting Committee
ISO/IEC JTC 1/SC 27/WG 1 - Information security management systems
Current Stage
6060 - International Standard published
Start Date
02-Dec-2021
Due Date
11-Jun-2021
Completion Date
02-Dec-2021
Ref Project

Relations

Consolidated By
ISO 13628-1:2025 - Oil and gas industries including low carbon energy — Design and operation of subsea production systems — Part 1: General requirements and recommendations
Effective Date
14-Oct-2023
Amends
ISO/IEC 27021:2017 - Information technology — Security techniques — Competence requirements for information security management systems professionals
Effective Date
25-Apr-2020

Buy Standard

ISO/IEC 27021:2017/Amd 1:2021 - Information technology — Security techniques — Competence requirements for information security management systems professionals — Amendment 1: Addition of ISO/IEC 27001:2013 clauses or subclauses to competence requirements Released:12/2/2021ISO/IEC 27021:2017/Amd 1:2021 - Information technology — Security techniques — Competence requirements for information security management systems professionals — Amendment 1: Addition of ISO/IEC 27001:2013 clauses or subclauses to competence requirements Released:12/2/2021
PreviousNext
Standard
ISO/IEC 27021:2017/Amd 1:2021 - Information technology — Security techniques — Competence requirements for information security management systems professionals — Amendment 1: Addition of ISO/IEC 27001:2013 clauses or subclauses to competence requirements Released:12/2/2021
English language
2 pages
sale 15% off
Preview
sale 15% off
Preview
ISO/IEC 27021:2017/Amd 1:2021 - Addition of ISO/IEC 27001:2013 clauses or subclauses to competence requirementsISO/IEC 27021:2017/Amd 1:2021 - Addition of ISO/IEC 27001:2013 clauses or subclauses to competence requirements
PreviousNext
Standard
ISO/IEC 27021:2017/Amd 1:2021 - Addition of ISO/IEC 27001:2013 clauses or subclauses to competence requirements
English language
2 pages
sale 15% off
Preview
sale 15% off
Preview

Standards Content (Sample)


INTERNATIONAL ISO/IEC
STANDARD 27021
First edition
2017-10
AMENDMENT 1
2021-12
Information technology — Security
techniques — Competence
requirements for information security
management systems professionals
AMENDMENT 1: Addition of ISO/IEC
27001:2013 clauses or subclauses to
competence requirements
Technologies de l'information — Techniques de sécurité — Exigences
de compétence pour les professionnels de la gestion des systèmes de
management de la sécurité
AMENDEMENT 1: Ajout d'articles ou de paragraphes de l'ISO/IEC
27001:2013 aux exigences en matière de compétence
Reference number
ISO/IEC 27021:2017/Amd. 1:2021(E)
© ISO/IEC 2021
ISO/IEC 27021:2017/Amd. 1:2021(E)
© ISO/IEC 2021
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may
be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on
the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address below
or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: +41 22 749 01 11
Email: copyright@iso.org
Website: www.iso.org
Published in Switzerland
ii
© ISO/IEC 2021 – All rights reserved

ISO/IEC 27021:2017/Amd. 1:2021(E)
Foreword
ISO (the International Organization for Standardization) and IEC (the International Electrotechnical
Commission) form the specialized system for worldwide standardization. National bodies that are
members of ISO or IEC participate in the development of International Standards through technical
committees established by the respective organization to deal with particular fields of technical
activity. ISO and IEC technical committees collaborate in fields of mutual interest. Other international
organizations, governmental and non-governmental, in liaison with ISO and IEC, also take part in the
work.
The procedures used to develop this document and those intended for its further maintenance are
described in the ISO/IEC Directives, Part 1. In particular, the different approval criteria needed for
the different types of document should be noted. This document was drafted in accordance with the
editorial rules of the ISO/IEC Directives, Part 2 (see www.iso.org/directives).
Attention is drawn to the possibility that some of the elements of this document may be the subject
of patent rights. ISO and IEC shall not be held responsible for identifying any or all such patent
rights. Details of any patent rights identified during the development of the document will be in the
Introduction and/or on the ISO list of patent declarations received (see www.iso.org/patents) or the IEC
list of patent declarations received (see https://
...


INTERNATIONAL ISO/IEC
STANDARD 27021
First edition
2017-10
AMENDMENT 1
2021-12
Information technology — Security
techniques — Competence
requirements for information security
management systems professionals
AMENDMENT 1: Addition of ISO/IEC
27001:2013 clauses or subclauses to
competence requirements
Technologies de l'information — Techniques de sécurité — Exigences
de compétence pour les professionnels de la gestion des systèmes de
management de la sécurité
AMENDEMENT 1: Ajout d'articles ou de paragraphes de l'ISO/IEC
27001:2013 aux exigences en matière de compétence
Reference number
ISO/IEC 27021:2017/Amd. 1:2021(E)
© ISO/IEC 2021
ISO/IEC 27021:2017/Amd. 1:2021(E)
© ISO/IEC 2021
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may
be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on
the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address below
or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: +41 22 749 01 11
Email: copyright@iso.org
Website: www.iso.org
Published in Switzerland
ii
© ISO/IEC 2021 – All rights reserved

ISO/IEC 27021:2017/Amd. 1:2021(E)
Foreword
ISO (the International Organization for Standardization) and IEC (the International Electrotechnical
Commission) form the specialized system for worldwide standardization. National bodies that are
members of ISO or IEC participate in the development of International Standards through technical
committees established by the respective organization to deal with particular fields of technical
activity. ISO and IEC technical committees collaborate in fields of mutual interest. Other international
organizations, governmental and non-governmental, in liaison with ISO and IEC, also take part in the
work.
The procedures used to develop this document and those intended for its further maintenance are
described in the ISO/IEC Directives, Part 1. In particular, the different approval criteria needed for
the different types of document should be noted. This document was drafted in accordance with the
editorial rules of the ISO/IEC Directives, Part 2 (see www.iso.org/directives).
Attention is drawn to the possibility that some of the elements of this document may be the subject
of patent rights. ISO and IEC shall not be held responsible for identifying any or all such patent
rights. Details of any patent rights identified during the development of the document will be in the
Introduction and/or on the ISO list of patent declarations received (see www.iso.org/patents) or the IEC
list of patent declarations received (see https://
...

Questions, Comments and Discussion

Ask us and Technical Secretary will try to provide an answer. You can facilitate discussion about the standard in here.

This May Also Interest You

ISO
ISO/IEC 19790:2025(Main)
Information security, cybersecurity and privacy protection — Security requirements for cryptographic modules

This document specifies the security requirements for a cryptographic module utilized within a security system protecting sensitive information in Information and Communication Technologies (ICT). It defines four security levels for cryptographic modules to provide for a wide spectrum of data sensitivity and a diversity of application environments. This document specifies up to four security levels for each of the 11 requirement areas with each security level increasing security over the preceding level.

  • Standard
    80 pages
    English language
    sale 15% off
  • Standard
    85 pages
    French language
    sale 15% off
ISO
ISO/IEC 24759:2025(Main)
Information security, cybersecurity and privacy protection — Test requirements for cryptographic modules

This document specifies the methods to be used by testing laboratories to test whether the cryptographic module conforms to the requirements specified in ISO/IEC 19790:2025. The methods are developed to provide a high degree of objectivity during the testing process and to ensure consistency across the testing laboratories. This document also specifies the information that vendors are required to provide testing laboratories as supporting evidence to demonstrate their cryptographic modules’ conformity to the requirements specified in ISO/IEC 19790:2025. Vendors can also use this document to verify whether their cryptographic modules satisfy the requirements specified in ISO/IEC 19790:2025 before applying to a testing laboratory for testing.

  • Standard
    182 pages
    English language
    sale 15% off
ISO
ISO/IEC 18031:2025(Main)
Information technology — Security techniques — Random bit generation

This document specifies a conceptual model for a random bit generator for cryptographic purposes, together with the elements of this model. This document specifies the characteristics of the main elements required for both non-deterministic and deterministic random bit generators. It also establishes the security requirements for both non-deterministic and deterministic random bit generators. Techniques for statistical testing of random bit generators for the purposes of independent verification or validation and detailed designs for such generators are outside the scope of this document.

  • Standard
    94 pages
    English language
    sale 15% off
ISO
ISO/IEC 27562:2024(Main)
Information technology — Security techniques — Privacy guidelines for fintech services

This document provides guidelines on privacy for fintech services. It identifies all relevant business models and roles in consumer-to-business relations and business-to-business relations, as well as privacy risks and privacy requirements, which are related to fintech services. It provides specific privacy controls for fintech services to address privacy risks. This document is based on the principles from ISO/IEC 29100, ISO/IEC 27701, and ISO/IEC 29184, the privacy impact assessment framework described in ISO/IEC 29134, and the risk management guideline described in ISO 31000. It also provides guidelines focusing on a set of privacy requirements for each stakeholder. This document can be applicable to all kinds of organizations such as regulators, institutions, service providers and product providers in the fintech service environment.

  • Standard
    30 pages
    English language
    sale 15% off
ISO
ISO/IEC 27013:2021/Amd 1:2024(Amendment)
Information security, cybersecurity and privacy protection — Guidance on the integrated implementation of ISO/IEC 27001 and ISO/IEC 20000-1 — Amendment 1
  • Standard
    4 pages
    English language
    sale 15% off
ISO
ISO/IEC 20008-3:2024(Main)
Information security — Anonymous digital signatures — Part 3: Mechanisms using multiple public keys

This document specifies anonymous digital signature mechanisms in which a verifier uses multiple public keys to verify a digital signature. This document provides: — a general description of an anonymous digital signature mechanism using multiple public keys; — a variety of mechanisms that provide such anonymous digital signatures. For each mechanism, this document specifies the process for: — generating the private key and public key of each user; — producing signatures; — verifying signatures; — linking signatures (if the mechanism supports linking); — tracing signatures (if the mechanism supports tracing); — producing signatures with threshold capability (if the mechanism supports a threshold capability); — verifying signatures with threshold capability (if the mechanism supports a threshold capability). This document does not define the implementation of a public key infrastructure (PKI) and the means for distinct entities to exchange, extract and verify their respective public key certificates.

  • Standard
    23 pages
    English language
    sale 15% off
ISO
ISO/IEC 27035-4:2024(Main)
Information technology — Information security incident management — Part 4: Coordination

This document provides guidelines for multiple organizations handling information security incidents in a coordinated manner. It also addresses the impacts of external cooperation on the internal incident management of an individual organization and provides guidelines for an individual organization to adapt to the coordination process. Furthermore, it provides guidelines for the coordination team, if it exists, to perform coordination activities supporting the cross-organization incident response. The principles given in this document are generic and are intended to be applicable to multiple organizations to work together to handle information security incidents, regardless of their types, sizes or nature. Organizations can adjust the guidance given in this document according to their type, sizes and nature of business in relation to the information security risk situation. This document is also applicable to an individual organization that participates in partner relationships.

  • Standard
    22 pages
    English language
    sale 15% off
ISO
ISO/IEC 9797-2:2021/Cor 1:2024(Corrigendum)
Information security — Message authentication codes (MACs) — Part 2: Mechanisms using a dedicated hash-function — Technical Corrigendum 1
  • Standard
    3 pages
    English language
    sale 15% off
ISO
ISO/IEC 18014-2:2021/Cor 1:2024(Corrigendum)
Information security — Time-stamping services — Part 2: Mechanisms producing independent tokens — Technical Corrigendum 1
  • Standard
    1 page
    English language
    sale 15% off
ISO
ISO/IEC 27019:2024(Main)
Information security, cybersecurity and privacy protection — Information security controls for the energy utility industry

This document provides information security controls for the energy utility industry, based on ISO/IEC 27002:2022, for controlling and monitoring the production or generation, transmission, storage and distribution of electric power, gas, oil and heat, and for the control of associated supporting processes. This includes in particular the following: — central and distributed process control, monitoring and automation technology as well as information systems used for their operation, such as programming and parameterization devices; — digital controllers and automation components such as control and field devices or programmable logic controllers (PLCs), including digital sensor and actuator elements; — all further supporting information systems used in the process control domain, e.g. for supplementary data visualization tasks and for controlling, monitoring, data archiving, historian logging, reporting and documentation purposes; — communication technology used in the process control domain, e.g. networks, telemetry, telecontrol applications and remote-control technology; — Advanced metering infrastructure (AMI) components, e.g. smart meters; — measurement devices, e.g. for emission values; — digital protection and safety systems, e.g. protection relays, safety PLCs, emergency governor mechanisms; — energy management systems, e.g. for distributed energy resources (DER), electric charging infrastructures, and for private households, residential buildings or industrial customer installations; — distributed components of smart grid environments, e.g. in energy grids, in private households, residential buildings or industrial customer installations; — all software, firmware and applications installed on above-mentioned systems, e.g. distribution management system (DMS) applications or outage management systems (OMS); — any premises housing the abovementioned equipment and systems; — remote maintenance systems for abovementioned systems. This document does not apply to the process control domain of nuclear facilities. This domain is covered by IEC 63096.

  • Standard
    39 pages
    English language
    sale 15% off
  • Standard
    48 pages
    French language
    sale 15% off