BSI PD ISO/IEC TS 23532-1:2021:2022 Edition
$142.49
Information security, cybersecurity and privacy protection. Requirements for the competence of IT security testing and evaluation laboratories – Evaluation for ISO/IEC 15408
Published By | Publication Date | Number of Pages |
BSI | 2022 | 30 |
PDF Catalog
PDF Pages | PDF Title |
---|---|
2 | National foreword |
7 | Foreword |
8 | Introduction |
9 | 1 Scope 2 Normative references 3 Terms and definitions |
10 | 4 General requirements 4.1 Impartiality 4.2 Confidentiality |
11 | 5 Structural requirements |
12 | 6 Resource requirements 6.1 General 6.2 Personnel |
13 | 6.3 Facilities and environmental conditions |
14 | 6.4 Equipment |
15 | 6.5 Metrological traceability 6.6 Externally provided products and services |
16 | 7 Process requirements 7.1 Review of requests, tenders and contracts 7.2 Selection, verification and validation of methods 7.2.1 Selection and verification of methods |
17 | 7.2.2 Validation of methods 7.3 Sampling 7.4 Handling of test or calibration items |
18 | 7.5 Technical records 7.6 Evaluation of measurement uncertainty |
19 | 7.7 Ensuring the validity of results 7.8 Reporting of results 7.8.1 General 7.8.2 Common requirements for reports (test, calibration or sampling) 7.8.3 Specific requirements for test reports |
20 | 7.8.4 Specific requirements for calibration certificates 7.8.5 Reporting sampling – specific requirements 7.8.6 Reporting statements of conformity 7.8.7 Reporting opinions and interpretations 7.8.8 Amendments to reports |
21 | 7.9 Complaints 7.10 Nonconforming work 7.11 Control of data and information management |
22 | 8 Management system requirements 8.1 Options 8.1.1 General 8.1.2 Option A 8.1.3 Option B 8.2 Management system documentation (Option A) |
23 | 8.3 Control of management system documents (Option A) 8.4 Records (Option A) |
24 | 8.5 Actions to address risks and opportunities (Option A) 8.6 Improvement (Option A) 8.7 Corrective actions (Option A) 8.8 Internal audits (Option A) 8.9 Management reviews (Option A) |
25 | Annex A (informative) Metrological traceability |
26 | Annex B (informative) Management system options |
27 | Annex C (informative) Standards relation in IT security evaluation |
28 | Bibliography |