Standards Flashcards
TOGAF (The Open Group Architecture Framework)
Model and methodology for the development of enterprise architectures
Zachman Framework
Model for the development of enterprise frameworks
DoDAF (Department of Defense Architecture Framework)
DOD architecture framework that ensures interoperability of systems that meet military mission goals
MODAF (Ministry of Defence Architectural Framework)
Architecture framework used mainly in military support missions developed by the British Ministry of Defence
SABSA (Sherwood Applied Business Security Architecture)
Model and methodology for the development of information security enterprise achitecture
COBIT 5 (Control Objectives for Information and Technologies)
Business frameowrk for IT enterprise management and governance ISACA
NiST SP 800-53
Set of controls to protect U.S. federal systems
COSO Internal Control - Integrated Framework
set of internal corporate controls to help reduce the risk of financial fraud.
ITIL (Information Technology Infrastructure Library)
processes to allow for IT service management
ISO/IEC 27000
Overview and vocabulary
ISO/IEC 27001
ISMS requirements
ISO/IEC 27002
Code of practice for information security controls
ISO/IEC 27003
ISMS implementation
ISO/IEC 27004
ISMS measurement
ISO/IEC 27005
Risk management
ISO/IEC 27006
Certification body requirements
ISO/IEC 27007
ISMS auditing
ISO/IEC 27008
Guidance for auditors
ISO/IEC 27011
Telecommunications organizations
ISO/IEC 27014
Information Security Governance
ISO/IEC 27015
Financial Sector
ISO/IEC 27031
Business Continuity
ISO/IEC 27032
Cyber Security
ISO/IEC 27033
Network Security
ISO/IEC 27034
Application Security
ISO/IEC 27035
Incident Management
ISO/IEC 27037
Digital evidence collection and preservation
ISO/IEC 27799
Health organizations
ROI
Return on Investment
SOX
Sarbanes-Oxley Act to fight financial fraud
APT
Advanced Persistent Threat
Council of Europe Convention on Cybercrime
Standard for international response to cybercrime
OECD Organization for Economic Co-operation and velopment
Organization that defined rules for international data exchange.