2. Getting involved
3. Standards Committees
4. NAMed

Overview

This standard gives guidelines for organizational information security standards and information security management practices including the selection, implementation and management of controls taking into consideration the organization's information security risk environment(s). This standard has been prepared by Technical Committee ISO/TC 215 "Health Informatics" (secretariat: ANSI, United States) with the collaboration of Technical Committee CEN/TC 251 "Medical Informatics" (secretariat: NEN, the Netherlands) with the participation of German experts. The responsible national standardization committee is Working Committee NA 063-07-04 AA "Sicherheit" ("Security") at DIN Standards Committee Medicine (NAMed). Taking Presidential Decision 1/2004 into consideration this document contains only the original English version of EN ISO 27799:2016 and ISO 27799:2016. Compared to DIN EN ISO 27799:2008-10, the title has been changed and, in particular, adaptation to ISO/IEC FDIS 27002:2013 has been carried out.

Document: references other documents

Responsible national committee

NA 176-02-04 AA - Security  

Responsible european committee

CEN/TC 251/WG 1 - Enterprise and Information  

Responsible international committee

ISO/TC 215/WG 4 - Security, Safety and Privacy