참고문헌
- ISO/IEC 27018:2014 Information security - Security techniques - Information security management systems - Code of practice for Information security controls based on ISO/IEC 27002 for protection of personally identifiable information (PII) in public cloud acting as PII processors, ISO, 2014
- ISO/IEC 27017:2015 Information security - Security techniques - Information security management systems - Code of practice for Information security controls based on ISO/IEC 27002 for cloud services, ISO, 2015
- ITU-T X.1051ISO/IEC 27011:2016 Information security - Security techniques - Information security management systems - Code of practice for Information security controls based on ISO/IEC 27002 for telecommunication organizatons, ISO, 2016
- ISO/IEC TR 27019:2013 Information security - Security techniques - Information security management guidelines on ISO/IEC 27002 for process control systems specific to the energy utility industry, ISO, 2013
- ISO/IEC DIS 29151, Information security - Security techniques - Information security management systems - Code of practice for personally identifiable information protection, ISO, 2016
- ISO/IEC 27002:2013, Information security - Security techniques - Information security management systems - Code of practice for information security controls, ISO, 2013
- ISO/IEC 27009:2016, Information security - Security techniques - Sector-specific application of ISO/IEC 27001 - Requirements, ISO, 2016
- ISO/IEC 27001:2013, Information security - Security techniques - Information security management systems - Requirements, ISO, 2013
- ISO/IEC 27000:2016 Information security - Security techniques - Information security management systems - Overview and vocabulary, ISO, 2016
- ISO/IEC 27799:2016 Health informatics - Information security management in health using ISO/IEC 27002, ISO, 2016
- CSA Security, Trust & Assurance Registry (STAR) : Cloud Security Alliance, https://cloudsecurityalliance.org/star/
- Terms of reference for the study period on development use case examples for the application of ISO/IEC 27009, ISO, 2015
- Results of the expert CfC for the SP on the Development of Use Case Examples for the Application of ISO/IEC 27009, ISO, 2016
- ISMSクラウドセキュリティ認証に関する説明会資料, http://www.isms.jipdec.or.jp/seminar/cloud/shiryou20160426.html
- "KISA, 클라우드서비스 정보보호 수준 평가.인증한다", 보도자료, KISA, 2016
- ISO/IEC DIS 29134, Information technology - Security techniques - Privacy impact assessment - Guidelines, ISO, 2016