ISO_IEC 24762-2008 信息技术.安全技术.信息和通信技术故障恢复服务指南.pdf

标准号：ISO/IEC 24762-2008
实施状态：作废
中文名称：信息技术.安全技术.信息和通信技术故障恢复服务指南
英文名称：Information technology - Security techniques - Guidelines for information and communications technology disaster recovery services
发布日期：2008-02
代替标准：ISO/IEC FDIS 24762-2007
采用标准：ANSI/INCITS/ISO/IEC 24762-2009,IDT;BS ISO/IEC 24762-2008,IDT;CAN/CSA-ISO/IEC 24762-08-2008,IDTN-ISO/IEC 24762-2010,IDT
起草单位：ISO/IEC JTC 1/SC 27
标准简介：1.1 General
This International Standard describes the basic practices which ICT DR service providers, both in-house and
outsourced, should consider.
It covers the requirements that service providers should meet, recognizing that individual organizations may
have additional requirements that are specific to them (which would have to be addressed in the
agreements/contracts with service providers). Examples of such organization requirements may include
special encryption software and secured operation procedures, equipment, knowledgeable personnel and
application documentation. Such additional organization specific requirements, if necessary, are generally
negotiated on a case-by-case basis and are the subject of detailed contract negotiations between
organizations and their ICT DR service providers and are not within the scope of this International Standard.
1.2 Exclusions
This International Standard does not:
a) provide any guidance on business continuity management as a whole for organizations;
b) take precedence over any laws and regulations, both existing and those in the future;
c) have any legal power over the Service Level Agreements (SLAs) included in negotiated contracts
between organizations and service providers;
d) address requirements, legal or otherwise, governing normal business operations to be adhered to by
service providers. Examples of such requirements include detailed regulations covering building and fire
safety, occupational health and safety, copyright regulation and prevailing human resource practices;
e) provide an exhaustive list, and thus technical security controls are not covered. Readers should refer to
ISO/IEC 27001 and ISO/IEC 27002, vendor literature and other technical references, as necessary.
1.3 Audience
This International Standard applies to:
a) all organizations requiring the ICT DR services as part of their business (whether in-house and/or
outsourced);
b) ICT DR service providers in their provision of ICT DR services;
c) communities of organizations with reciprocal or mutual arrangements.
文件格式：PDF
文件大小：510.46KB
文件页数：78
（以上信息更新时间为：2019-11-22）



文档语言及版本参照下方封面截图：