EVS-ISO/IEC 13335-1:2009

ISO/IEC 13335 contains guidance on the management of ICT security. Part 1 of ISO/IEC 13335 presents the concepts and models fundamental to a basic understanding of ICT security, and addresses the general management issues that are essential to the successful planning, implementation and operation of ICT security.  It is not the intent of this International Standard to suggest a particular management approach to ICT security. Instead ISO/IEC 13335-1 contains a general discussion of useful concepts and
models for the management of ICT security. This material is general and applicable to many different styles of management and organizational environments. It is organized in a manner that allows the tailoring of the material to meet the needs of an organization and its specific management style.