ISO/IEC JTC 1 - Information technology

This document provides a taxonomy, reference model, considerations for a security framework and a security problem definition for digital currency hardware wallets (DCHWs). It also specifies security objectives to address security issues related to the security problem definition. This document is applicable to organizations that develop and operate DCHWs, e.g. mobile device manufacturers, chip manufacturers and companies that provide DCHW solutions. This document is also relevant to third parties that provide services to these stakeholders. It addresses sovereign or fiat digital currencies issued by a specific entity, e.g. a central bank.

This document specifies the framework, concepts, methodology for testing, and criteria to be achieved to claim conformance to the image coding technology Rec. ITU-T T.840.1 | ISO/IEC 6048-1, known as Learning-based image coding (JPEG AI). It lists the conformance testing procedures.

This document specifies a reference software implementation of ISO/IEC 19566-5 [1]. The reference software is accompanied with a reference dataset which provides an extensive list of the various JUMBF data structures specified in ISO/IEC 19566-5 [1].

This document provides a set of properties for the description of learning resources from ISO 15836-1 and ISO 15836-2 using the framework provided in ISO/IEC 19788-1. This document specifies properties whose codomain is "literal" (as considered in early Dublin Core) and properties whose codomain is a resource class; the ISO 15836 series implicitly allowing both. This provides full interoperability at the time of expressing existing Dublin Core records with MLR, while allowing a linked data approach for the description of learning resources.

This document specifies the method for an application to: obtain OAuth tokens in a moderately secure manner for access to protected data; use OpenID Connect (OIDC) to identify the customer (user); and use tokens to access REST APIs in a moderately secure manner.

This document defines an evaluation procedure and evaluation methods for assessing the accuracy and precision of 3D modelling software for designing 3D printing models using phantoms. This document is not intended to evaluate the 3D-printed product itself.

This document specifies the brain–computer interface (BCI) reference architecture (RA). The BCI RA defines the key characteristics of BCI systems, provides a common language for stakeholders, and addresses their concerns. It also provides guidance to system architects on efficient BCI system design, typical implementation categories and effects of using BCI technology in developing applications. Additionally, this document serves as a technical reference for architects, manufacturers, vendors, service providers, regulators and the public to better understand the BCI architecture, its functions and the underlying technology that supports the BCI systems.

This document specifies an extension of evaluation methods and activities for cryptographic protocols based on ISO/IEC 15408-4, which provides a framework for evaluation methods and activities. This document provides a mapping between the work items for cryptographic protocol evaluation and the associated evaluation activities or evaluation methods. Additionally, this document also provides security assurance classification based on the cryptographic assessment performed by automated provers in four different levels of increasing assurance.

This document specifies a framework for establishing trust in media. This framework includes aspects of authenticity, provenance, attribution, intellectual property rights, and integrity through secure and reliable annotation of the media assets throughout their life cycle.

This document provides guidance on the assessment scheme to be used when implementing the governance of IT in organizations in accordance with ISO/IEC 38500 and ISO/IEC 38501-1. It establishes the assessment framework and rating scale appropriate for principles-based governance of IT, and provides sample governance of IT characteristics for each of the 11 principles listed in ISO/IEC 38500 (see Annex A). This document can be used by individuals responsible for governance of IT in an organization, as well as individuals supporting the governance of IT in organizations, and is applicable to organizations of all sizes and types.

This document contains descriptions of the IEEE 802® standards published by the IEEE for frame-based data networks as well as a reference model (RM) for protocol standards. A specification for the identification of public, private, and standard protocols is included.

This document specifies a set of tests and procedures designed to indicate whether encoders or decoders meet the requirements specified in Rec. ITU-T H.266 | ISO/IEC 23090-3.

This document defines Ethernet local area, access and metropolitan area networks. Ethernet is specified at selected speeds of operation; and uses a common media access control (MAC) specification and management information base (MIB). The Carrier Sense Multiple Access with Collision Detection (CSMA/CD) MAC protocol specifies shared medium (half duplex) operation, as well as full duplex operation. Speed specific Media Independent Interfaces (MIIs) provide an architectural and optional implementation interface to selected Physical Layer devices (PHYs). The Physical Layer encodes frames for transmission and decodes received frames with the modulation specified for the speed of operation, transmission medium and supported link length. Other specified capabilities include: control and management protocols, and the provision of power over selected twisted pair PHY types.

This document provides principles for governing bodies of organizations (which can comprise owners, directors, partners, executive managers, or similar) on the effective, efficient and acceptable use of data within their organizations by: applying the governance principles and model of ISO/IEC 38500 to the governance of data; assuring stakeholders that, if the principles and practices proposed by this document are followed, they can have confidence in the organization’s governance of data; informing and guiding governing bodies in the use and protection of data in their organizations. This document can also provide guidance to a wider community, including: executive managers; external businesses or technical specialists, such as legal or accounting specialists, retail or industrial associations, or professional bodies; internal and external service providers (including consultants); auditors. This document applies to the governance of the current and future use of data that is created, collected, stored, secured, protected, or controlled by IT systems, and impacts the management processes and decisions relating to data. This document defines the governance of data as a subset or domain of the governance of IT, which itself is a subset or domain of organizational, or in the case of a corporation, corporate governance. This document is applicable to all organizations, including public and private companies, government entities, and not-for-profit organizations. This document is applicable to organizations of all sizes, regardless of the extent of their dependence on data.

This document provides requirements and guidance for kiosk manufacturers, service providers and purchasers to ensure that kiosks can be used by a diverse range of users. This document specifies requirements and recommendations for designing, manufacturing, installing, and operating kiosks to ensure accessibility across diverse users and varying physical and environmental conditions. The requirements and recommendations pertain to the presentation of information, operation and interaction with users on kiosks. They are applied to hardware, software and content of the kiosks, as well as their installation environment.

This document defines common formats, values, and coding for data interoperability and exchange among systems in the Internet of Things (IoT).

This document defines a storage and delivery format for metadata for energy-efficient decoding, encoding, presentation, and selection of media (green metadata) as defined in ISO/IEC 23001-11. The green metadata are timed metadata which can be associated with other tracks in the ISO Base Media File Format. Timed metadata such as power consumption information and their metrics are defined in this document for carriage in files based on ISO/IEC 14496-12. In the context of DASH delivery, the green metadata representations and their association to the media representations are also defined using the signalling mechanisms specified in ISO/IEC 23009-1:2022 and ISO/IEC 23009-3[1]. These metadata can be used for multiple purposes, including optimizing power consumption during playback and supporting dynamic adaptive streaming.

This document provides an overview of the information management processes that are relevant to the acquisition and supply of information for users. It applies the agreement processes (acquisition and supply) to information for users, and addresses the preparation of requirements for this information. These requirements are central to the information for users specification and statement of work discussed in this document. This document also addresses requirements for primary information outputs of the acquisition and supply process: the request for proposal and the proposal for information products and services. This document is intended for use in acquiring or supplying any type of information for users and is independent of information development or management tools or methodologies. This document can be helpful for acquiring and supplying the following types of information, although it does not cover all aspects of them: multimedia systems using animation, video, and sound; computer-based training (CBT) packages and specialized course materials intended primarily for use in formal training programs; maintenance information describing the internal operation of systems software; virtual reality and augmented reality; collaboratively generated, often known as “wiki”, information, which is curated periodically; information for users incorporated into the user interface. This document is applicable to acquirers and suppliers of information for users, including a variety of specialists: analysts (e.g. business analysts, human factors engineers) who identify the tasks that the intended users perform with the system; managers of the software or system development process or the information management process; managers of the acquisition process, and those who authorize and approve acquisitions; managers and authors involved in proposal preparation. It can also be consulted by those with other roles and interests in the information development process: information designers and architects who plan the structure, format, and content requirements of information products; experienced authors and editors who develop the written content for information for users; graphic designers with expertise in electronic media; user interface designers and ergonomics experts working together to design the presentation of the information on the screen; usability testers, information development reviewers, subject-matter experts; developers of tools for creating on-screen information.

This document specifies a general reference architecture for a digital twin system in terms of defining system fundamentals through the use of architecture views.

This document specifies the syntax and semantics of description schemes to represent data exchanged by media analysers for distributed artificial intelligence (AI) processing. Moreover, it specifies the application programming interfaces (APIs) to exchange these data between media things. This document does not specify how analysis is carried out, but defines the interfaces between the media things.

This document specifies low latency, low complexity light detection and ranging (LiDAR) coding.

This document provides a metamodel to describe the structure and semantics of an implemented form devoid of any specific, domain semantics, e.g. in healthcare, social science, e-government and e-business, or representation format so that data can be faithfully exchanged between systems and system components, and associations expressed between sets of form designs whose data can be compared, joined or composed for analysis.

This document provides guidance for information security controls, based on ISO/IEC 27002, applicable to the provision and use of cloud services. This document provides: additional guidance for relevant controls specified in ISO/IEC 27002:2022; additional controls with guidance that specifically relate to cloud services. This document provides controls and guidance for cloud service customers (CSCs) and cloud service providers (CSPs). This document is considered to be a horizontal document as it provides a foundation and a common understanding of security regarding the provision and use of cloud services. NOTE This document applies to all types of cloud deployment models including the private cloud. When applying this document to the private cloud, the controls and guidance of this document are applicable, although adjustments can be necessary to adapt to the relationships and abilities of an organization’s internal departments.

This document specifies controls, purpose, and guidance for implementing controls, to meet the requirements identified by a risk and impact assessment related to the protection of personally identifiable information (PII). In particular, this document specifies requirements and guidance based on ISO/IEC 27002, taking into consideration the controls for processing PII that can be applicable within the context of an organization's information security risk environment(s). This document is applicable to all types and sizes of organizations acting as PII controllers (as defined in ISO/IEC 29100), including public and private companies, government entities and not-for-profit organizations that process PII, in particular, organizations that do not establish or operate a privacy information management system.

This document provides a description of a set of common technologies and techniques used in conjunction with cloud computing. These include: virtual machines (VMs) and hypervisors; containers and container management systems (CMSs); serverless computing; microservices architecture; automation; platform as a service systems and architecture; storage services; security, scalability and networking as applied to the above cloud computing technologies.

This document specifies the syntax and semantics of description schemes for representing data exchanged by media things (e.g. media sensors, media actuators, and media storages). Moreover, it specifies the APIs to exchange these data between media things. The following interfaces are under the scope of this document: APIs for accessing media sensors, actuators, storage, managers, controllers, and aggregators; structured data formats (XML) representing media thing’s base data types, including sensors, actuators, storage, managers, aggregators, controllers, and their elements; structured data formats (XML) representing the media sensor’s output data; and, structured data formats (XML) representing media actuator’s commands. This document does not specify how sensing and actuating are carried out but defines the interfaces between the media things.

This document provides guidelines for the implementation of the specific space profiles for VSEs through a set of development processes. This document is applicable to small suppliers, developers, managers and quality assurance managers of software products in the space domain. The document can also be applied by a single party through a self-imposed set of processes. This document does not prescribe a specific system or software life cycle model, development methodology, model or technique.

This document provides an overview of conceptual frameworks for graded benchmarking of artificial intelligence (AI) system quality characteristics. The aim is to examine the feasibility of using differentiated benchmarking of quality characteristics based on the complexity and context of use of an AI system.

This document specifies syntax, semantics, and decoding for video based dynamic mesh coding (V-DMC), basemesh coding, MPEG edgebreaker static mesh coding, and arithmetic coded displacement. Furthermore, this document specifies processes that can be used for reconstruction of visual volumetric media and also include additional processes such as post-decoding, pre-reconstruction, post-reconstruction, and adaptation.

This document specifies system level functionalities for the communication of interactive audio-visual scenes, i.e. the coded representation of information related to the management of data streams (synchronization, identification, description and association of stream content).

This document specifies the Open Font Format (OFF) specification, including the TrueType and Compact Font Format (CFF) outline formats. Many references to both TrueType and PostScript exist throughout this document, as Open Font Format fonts combine the two technologies. The document defines data structures for various font tables and provides the necessary details for developers to build a font rendering and text layout/shaping engines in compliance with this document.