09 junio 2008

Publicada ISO/IEC 27005:2008

La semana pasada se publicó la norma ISO/IEC 27005:2008, bajo el título Information technology - Security techniques - Information security risk management. Como dice su nombre, esta norma supone una guía para la gestión de riesgos de seguridad de la información, de acuerdo con los principios ya definidos en otras normas de la serie 27000. Sustituye (y actualiza) a las partes 3 y 4 de la norma ISO TR 13335 (Técnicas para la gestión de la seguridad IT y Selección de salvaguardas, respectivamente), y se convierte en la guía principal para el desarrollo de las actividades de análisis y tratamiento de riesgos en el contexto de un SGSI. Constituye, por tanto, una ampliación del apartado 4.2.1 de la norma ISO 27001, en el que se presenta el análisis de riesgos como la piedra angular de un SGSI, y supone una excelente ayuda para todo aquél que quiera profundizar en el desarrollo práctico de un proceso de gestión de riesgos de seguridad de la información.

64 comentarios:

Matías Silvero dijo...

Insisto Gran Maestro:
Has podido echarle un vistazo al estándar o al draft? Pregunto porque estoy embarcado en algunos proyectos y a falta de estándar ISO decidí utilizar a Magerit como herramienta para el análisis del riesgo y adecuarla a las necesidades de cada caso.

Saludos.

Anónimo dijo...

Aclaren que es un borrador y falta un tiempo mas para que salga la version final a la venta

Matías Silvero dijo...

Si te fijas el estado del documento en el link que posteo Joseba, verás que la ISO la clasifica como Status: Published. Creo que eso significa que dejó de ser un Draft o estoy equivocado?

Saludos

Anónimo dijo...

Creo que no cabe duda alguna: está en estado 60.60, que significa "International Standard published". O sea, "publicadísimo".

Joseba Enjuto dijo...

Efectivamente, es un estándar totalmente definitivo. Como nos cuenta Paloma Llaneza en su blog, la norma ya pasó hace algún tiempo por su fase de borradores, aunque debido a las divergencias en su aprobación parece que su revisión se va a adelantar.

Anónimo dijo...

Hola. Me interesa saber si el MAGERIT II es compatible (da conformidad) con el nuevo estándar ISO/IEC 27005:2008
Saludos

Joseba Enjuto dijo...

Pues la pregunta tiene su miga, aunque parezca simple. A día de hoy existen distintas metodologías y estándares en relación al análisis de riesgos, porque además de la ISO 27005 podemos encontrarnos, por ejemplo, con la BS 7799-3 o MAGERIT, y todas son distintas. Probablemente se podría desarrollar un análisis de riesgos que fuese compatible con todas ellas a la vez, pero si la pregunta es si MAGERIT II es conforme con ISO 27005, yo diría que NO. Sí que son compatibles, pero hay un aspecto clave que creo que provoca esa ausencia de conformidad: el tratamiento del concepto de 'vulnerabilidad'. Magerit "obvia" el término e incorpora el concepto "por medio de las métricas de degradación del activo y frecuencia de ocurrencia de la amenaza", mientras que la ISO 27005 lo contempla explícitamente y "exige" su identificación explícita. Esta divergencia creo que es clave para poder afirmar que, aunque se puede realizar un análisis de riesgos conforme con ambas metodologías, seguir una de ellas no garantiza el cumplimiento de la otra.

Anónimo dijo...

Al igual que Matías, estoy seleccionando una metodología de análisis de riesgos para certificar ISO 27001 y me inclino por Magerit II.
Dado que la 27005 es "aclaratoria" de un aspecto de la 27001 entonces sería sensato preguntarse si en un futuro la 27001 exigirá conformidad con la 27005 en la etapa de análisis de riesgo. De ser así, la utilización de Magerit podría no ser adecuada para certificar 27001 en el futuro.
Joseba, ¿sabes algo respecto a si Magerit (y la herramienta Pilar) podría evolucionar de modo tal de dar conformidad con la 27005?
Desde ya, muchísimas gracias por tu ayuda!!
Saludos, Leo

Joseba Enjuto dijo...

Buenas tardes,

Es cierto que ISO 27005 amplía el apartado de gestión del riesgo de la ISO 27001. No obstante, dudo mucho que en un futuro la 27001 exija el cumplimiento de ISO 27005 para el análisis de riesgos, ya que en ese caso perdería su caracter de mínimos (en la práctica sería como integrar la 27005 dentro de la 27001 para ese aspecto tan concreto) y porque la 27005 es una norma del tipo "explicativa", en ningún caso de requisitos. Por lo tanto, creo que puedes estar tranquilo al respecto.

Personalmente no creo que Magerit vaya a evolucionar para ser conforme con ISO 27005, ya que son dos metodologías equivalentes pero con distancias de forma bastante significativas (que no de fondo), y no creo que dicha evolución (es posible que no estuviésemos hablando de Magerit V2.1 sino de Magerit v3) aporte demasiado.
Lo que sí veo más viable es la posibilidad de que PILAR pueda evolucionar para contemplar ciertas exigencias de forma contenidas en la 27005, pero, por lo que sé, este tema no es prioritario en el desarrollo de la herramienta, ni creo que vaya a serlo en breve. De todas formas, si me entero de algo al respecto, os mantendré informados...

Anónimo dijo...

Aaron Rodgers Jersey axiotakix
Andre Johnson Jersey axiotakix
Marshawn Lynch Jersey Women's axiotakix
http://www.nikeredskinsnflshop.com

Anónimo dijo...

[b][url=http://www.uggsonsalewebsite.co.uk/]uggs[/url][/b] There are numerous youth facilities and group centers which offer packages for difficulty teens. Inside these courses, they supply many different coping expertise and aid to teenagers that could assistance them regulate their problems. These applications also present mentors that may be beneficial on your teenager when they're possessing troubles speaking along with the family.

[b][url=http://www.louisvuittonpursesmarket.com/]www.louisvuittonpursesmarket.com[/url][/b] The auditory subliminal messages has to be very clear and easy to hear in case the other appears are eradicated. Here is the reason so many subliminal messages in audios are masked, or hidden behind, sea waves or audio. They mask or conceal the subliminal messages to ensure you cannot consciously make out what is staying or perhaps ascertain if it really is really a voice.

[b][url=http://www.uggsbootsoutletmall.co.uk/]uggs boots outlet[/url][/b] A independent button on the back again allows you to right away start recording movies while shooting photographs, without needing to make any excess settings. This package lens offers a focal size of 28-280mm (35mm camera equal) and supports a constant automobile concentrate operate that actually works for the two pictures and films. The aperture adaptively adjusts to every scene, letting you capture the type of delicate, softly targeted videos that merely a digital interchangeable lens digicam can develop.

[b][url=http://www.uggsonsalewebsite.co.uk/]uggs on alse[/url][/b] Even Tony Blair's bodyguards are acquiring on their own caught inside the glare of your British press today. Above the weekend, the right-leaning Everyday Telegraph-traditionally, no close friend to your former primary minister-ran an item describing how "dark-suited fellas who gave the impression to be security officers" had been noticed in a swanky Ny cafe tasting food items well before it manufactured its technique to Blair. In the event the impression sounds much more fitting to get a paranoid king than the usual British statesman, it's no accident-as of late, a series of news stories have unflatteringly painted Blair for a male with a number of shadowy techniques to cover about his private daily life and economic largess..

[b][url=http://www.uggsclearancemall.co.uk/]ugg uk[/url][/b] The Fendi handbags lovers have to know generally the genuine Fendi purses in price cut for away from style and defect. Try another way, for example the international trade plant. Generally speaking, within the manufacture process, you will find often some faulty purses.

Anónimo dijo...

eDgy ghd straightener
uVpm ugg uk
eYvb michael kors purse
9hFyf cheap uggs
9zSlp chi hair straightener
9xSqp ghd
3oXmf wholesale nfl jerseys
0oGqj ghd nz sale
2tTkq cheap north face
9tAje botas ugg baratas
7xTjb cheap ghd straighteners uk
8wXgb michael kors purses
8hLia cheap nfl jerseys
4yZym plancha ghd
1mVzg discount uggs

Anónimo dijo...

qZou cheap ghd
nNcp ugg sale
ySye michael kors sale
4zZew GHD Hair Straightener
9tZrz burberry purses
9fJol bottes ugg
0bMte ghd nz
7lDpx discount louis vuitton
5dCmr michael kors sale
5jQhq ghd straightners
1lToi ugg uk
4bSdz nike nfl jerseys
7rWnm michael kors sale
2fApn ghd lisseur
7yQty ugg boots sale

Anónimo dijo...

top [url=http://www.c-online-casino.co.uk/]uk casino bonus[/url] coincide the latest [url=http://www.casinolasvegass.com/]free casino[/url] autonomous no deposit hand-out at the leading [url=http://www.baywatchcasino.com/]casino games
[/url].

Anónimo dijo...

I find me ԁеalіng with thoughts like concern and sexual гejection all the time
Try setting up tіme on the calendаr а few dayѕ
the affirmаtiоn iѕ got
My blog ... payday loans online uk

Anónimo dijo...

Your phrase, simply charm
I consider, that you are mistaken. I can defend the position. Write to me in PM, we will discuss.
It is remarkable, it is a valuable piece
I advise to you to look for a site, with articles on a theme interesting you.
Yes, really. I agree with told all above. We can communicate on this theme.

[url=http://shenenmaoyif.eklablog.com/][b]michael kors outlet online[/b][/url]
[url=http://shenenmaoyif.webs.com/][b]michael kors outlet online[/b][/url]
[url=http://shenenmaoyitt.soup.io/][b]michael kors outlet online[/b][/url]
[url=http://shenenmaoyitt.blog.hr/][b]michael kors outlet online[/b][/url]
[url=http://michaelkorsoutlet2.angelfire.com/][b]michael kors outlet online[/b][/url]

Anónimo dijo...

When I initially commented I clicked the "Notify me when new comments are added" checkbox and now each time a comment is added I get several e-mails with the same comment.
Is there any way you can remove people from that service?
Appreciate it!

My web page ... michael kors perfumes

Anónimo dijo...

Hi, [url=http://www.topamaxdirectonline.com/]generic topamax [/url] - topamax without prescription - topiramate without prescription http://www.topamaxdirectonline.com/.

Anónimo dijo...

12, Lamisil Sale - terbinafine online http://www.lamisilfast24.net/, [url=http://www.lamisilfast24.net/] Price of Lamisil [/url]

Anónimo dijo...

1, Isotretinoin Price - cheap isotretinoin online http://www.benefitsofisotretinoin.net/, [url=http://www.benefitsofisotretinoin.net/]Accutane Online[/url]

Anónimo dijo...

Right away I am going away to do my breakfast, once having my
breakfast coming over again to read further news.


Also visit my homepage - cheap health insurance quotes

Anónimo dijo...

4, [url=http://www.ambienforsaleonline.com/]Zolpidem Online[/url] - Buy Generic Ambien - buy zolpidem no prescription http://www.ambienforsaleonline.com/ .

Anónimo dijo...

12, [url=http://www.nemedicalmassage.com/] Order Meridia [/url] - Order Meridia - sibutramine for sale http://www.nemedicalmassage.com/ .

Anónimo dijo...

If you wish for to obtain a great deal from this
post then you have to apply such strategies to your won blog.


My web blog ... rolexスーパーコピー

Anónimo dijo...

Due to several styles and colors of UGG boots and UGG shoes, you'll be able to match your mood and your clothes. 5L models from the "Iridescence" allowance box, despite well-designed counterfeit bright Jiuzun base, so that this cut apparent just appropriate bright reflects "Iridescence" the cradle of the neon, for that account of Hennessy cheap ugg boot Salon goes for the a great deal of admirable style. In addition, when you seem with the labels for your manufacturing site, you need to bear in mind that this labels which exhibit "Manufactured in China" are authentic, and many others are counterfeits.

my website コーチ 長財布

Anónimo dijo...

Remember that everyone is different, and if this new method of technique you just read about didn't work for you, then it's ok! Although around 35%-40% of couples will get pregnant in 3 months, it can take up to 18 months for 90% of normal couples to conceive.
http://pregnancyhelper.in/societal-pressure.html

Anónimo dijo...

whoah this weblog is wonderful i love reading your articles.
Keep up the great work! You understand, lots of people are looking round for this information, you could help them greatly.


Review my website the tao of badass

Anónimo dijo...

Hi there! Do you use Twitter? I'd like to follow you if that would be okay. I'm
undoubtedly enjoying your blog and look forward to new
posts.

my web-site - http://comparecarinsurancee.com

Anónimo dijo...

Outstanding post but I was wondering if you could write a litte more on this topic?
I'd be very thankful if you could elaborate a little bit more. Appreciate it!

my web blog - miu miu 財布

Anónimo dijo...

Hello there! I know this is kinda off topic but I
was wondering which blog platform are you using for this website?
I'm getting fed up of Wordpress because I've had issues with hackers
and I'm looking at alternatives for another platform. I would be awesome if you could point me in the direction of a good platform.

Take a look at my web blog - ミュウミュウ長財布

Anónimo dijo...

Excellent beat ! I would like to apprentice whilst you amend your site, how could i
subscribe for a blog website? The account aided me a appropriate deal.

I had been a little bit familiar of this your broadcast offered bright transparent idea

Visit my web page; best online casino graphics

Anónimo dijo...

I need to to thank you for this good read!! I certainly loved every bit
of it. I have got you book marked to check out new things you post…

Feel free to visit my webpage hertz rental car insurance rates

Anónimo dijo...

I am genuinely pleased to glance at this webpage posts which consists of lots of valuable facts, thanks for providing these data.


Here is my homepage http://www.openio.nl/w/index.php?title=Long_Length_Moving_Businesses_-_Just_how_to_Move_Along_Your_Move

Anónimo dijo...

Since the admin of this web page is working, no hesitation very
soon it will be famous, due to its feature contents.


my blog post man with a van dublin

Anónimo dijo...

Hi friends, how is everything, and what you want to say concerning
this article, in my view its actually amazing in support of me.


Feel free to visit my web blog: Emergency Plumbers Dublin

Anónimo dijo...

I seldom leave a response, but i did a few searching and wound up here "Publicada ISO/IEC 27005:2008".
And I do have a couple of questions for you if you do not mind.
Is it just me or does it look like a few of these remarks look like left
by brain dead people? :-P And, if you are posting on
additional sites, I would like to keep up with anything fresh you have to post.
Could you make a list of every one of all
your community sites like your Facebook page, twitter feed, or
linkedin profile?

Also visit my weblog - phentermine reviews

Anónimo dijo...

This site certainly has all of the information and facts I needed concerning this subject and didn't know who to ask.

Also visit my web page; phentermine side effects

Anónimo dijo...

Great post. I was checking continuously this blog and I'm impressed! Extremely useful info specifically the last part :) I care for such info a lot. I was seeking this certain information for a long time. Thank you and good luck.

Have a look at my blog :: life insurance compare

Anónimo dijo...

Hi there! Do you know if they make any plugins to assist with Search Engine Optimization?
I'm trying to get my blog to rank for some targeted keywords but I'm not seeing very good results.

If you know of any please share. Kudos!

Also visit my blog post: www.discountgarciniacambogia.com

Anónimo dijo...

Woah! I'm really enjoying the template/theme of this blog. It's
simple, yet effective. A lot of times it's very difficult to get that "perfect balance" between user friendliness and appearance. I must say you have done a superb job with this. Also, the blog loads super fast for me on Firefox. Outstanding Blog!

Also visit my web page: car insurance rates

Anónimo dijo...

I read this piece of writing fully on the topic of the difference of most recent and previous technologies, it's awesome article.

Feel free to visit my website: www.bettingsites10.com

Anónimo dijo...

Make sure you ask your insurance broker about the size and financial stability
of the Mexican car insurance 3 year history company they work in conjunction with.
It offers people who have a 3.

Here is my web-site auto insurance

Anónimo dijo...

You aren't ready to let your ex how do you get a girlfriend, they kind of go about it, most relationships that you are attracting. If you have the power to seduce her and woo her once again. Wait for a moment, that you are always pestering or contacting her?

Anónimo dijo...

So in lieu of walking at a steady tempo for say an hour, you'll adjust items up by alternating short bursts of intense strolling for say a minute followed by a recovery time period with slower walking immediately after each intense time period. Just retain alternating for 20 minutes to begin and add time while you come to be extra match. You could use interval teaching with all phases on thegreen coffee bean extract to boost your effects.

Also when you do any type of workout it's strongly recommended
you drink tons of water prior to throughout and soon after to keep one's body properly hydrated.

Anónimo dijo...

We're a group of volunteers and opening a new scheme in our community. Your site provided us with valuable information to work on. You have done an impressive job and our entire community will be grateful to you.

My blog post: www.casinoroulette.co

Anónimo dijo...

If you are going for finest contents like me, simply go to see this website all the time for the reason that
it gives feature contents, thanks

my web page best background check

Anónimo dijo...

You can certainly see your expertise in the article you write.
The world hopes for more passionate writers like you who are not afraid to
mention how they believe. All the time follow your heart.


my web page :: colorado river rafting companies

Anónimo dijo...

Wonderful beat ! I would like to apprentice even as you amend your website, how can i subscribe for a blog website?

The account aided me a appropriate deal.
I have been tiny bit familiar of this your broadcast offered brilliant transparent concept

Feel free to surf to my weblog ... jailbreak iphone 5 tethered

Anónimo dijo...

You can make her miss you, how to attract women tips that's why. If you have done your job of building a lot of money or incredible movie-star good looks, proving that you do need to communicate. Record producer Ron Fair agrees with McG, stating that, 'Putting those kinds of situations.



Also visit my web blog ... how to attract beautiful women

Anónimo dijo...

Hello would you mind sharing which blog platform you're working with? I'm planning
to start my own blog soon but I'm having a tough time choosing between BlogEngine/Wordpress/B2evolution and Drupal. The reason I ask is because your design and style seems different then most blogs and I'm looking for something completely unique.
P.S Apologies for being off-topic but I had to ask!

Feel free to visit my homepage - iphone 5 jailbreak

Anónimo dijo...

What's up friends, its fantastic article regarding teachingand entirely explained, keep it up all the time.

Feel free to surf to my weblog ... best mobile advertising

Anónimo dijo...

This is my first time pay a quick visit at here and i am genuinely pleassant to read everthing at
one place.

Check out my homepage :: cool site on diets

Anónimo dijo...

Be sure how to attract a women to pay attention to hygiene.
After all, you've started out as friends first. Just about any guy can do that now. I know I have and I am a very polite guy and I soon realized that is not the case.

Also visit my web page; ways to attract women

Anónimo dijo...

International campaigns have to refrain
from generalizing or utilizing cultural stereotypes.
In this case, the fundamental objective is to attract
potential customers to the site and make browsing through and ultimately
buy the product you are looking for. Internet Marketing company in
Mississauga Components are:.

Also visit my blog; blogs

Anónimo dijo...

10 Steρs to Reducе Spеech Anxiеty Attacks bу
Lenny Laskoωѕki1. Kava Kaѵa This hеrb, which οriginates from the
South Pacific islands, has beеn shown to
be highly beneficial to those suffеring fгom soсial аnxiety аttacκs.


My web blog ... how to stop anxiety attacks

Anónimo dijo...

Υou cаn fіnd a cοmplete list of blog stopѕ.
Hellо A hugе thank уou tо Lee аnd the girls of sаtchels n Blogs for inviting
me! Αnd thеre was no ruffle bag, that makes me
a full-fledged Blurb Buyer, and it made me stop and wondеr why, oh why, I wanted
to upload а pіctuгe of it and/oг touch it.
Anne MacΡherson, the heгoine of Taκen by thе
Viking. Ηey, it's smooth to a fourteen year old, ok?

Feel free to surf to my web-site ... ladies bags ()

Anónimo dijo...

Here's a Squidoo lens about search engine optimized press releases that was set up by a colleague. This is a popular choice for companies seeking a variety of SEM or Seo services, as the Big 3 mainly focus on contextual advertising. International customers do not know the currency exchange rates by heart between the US and their country.

Anónimo dijo...

So, if you want a diverse and balanced work experience while on your hotel management courses,
London offers just that. There are websites that offer free
i - Phone apps but you generally have to pay for good apps.
The plans were latter abandoned following agitations
from Equity, the Musicians' Union and theatre owners under the Save London Theatres Campaign.

Here is my weblog london apartments to rent

Anónimo dijo...

In certain climates, you may never use your air conditioning.
expected in 2006 will reach 60,000 square meters of exhibition area, exhibition area of 2000 compared
this data a full 300% increase. Geothermal systems are
compatible with most household heating infrastructures so you would not need
to redo your entire home.

my web site heating and cooling 07746

Anónimo dijo...

I know this if off topic but I'm looking into starting my own weblog and was curious what all is required to get set up? I'm assuming
having a blog like yours would cost a pretty penny?
I'm not very internet savvy so I'm not 100% sure.
Any recommendations or advice would be greatly appreciated.
Thank you

Feel free to visit my blog post :: sugar daddy finder

Anónimo dijo...

Of сourѕе Anхietу And Panіc
Attackѕ dгivеs the hot flash, уou
mау havе. Ιnstеaԁ, уour mіnԁ usuаlly wаnders,
which mеanѕ I am steerіng my bоdy bеtωeen
eustress anԁ ԁistresѕ ѵеry effесtіνely.
Anԁ women are more likеlу tο ѕuffer setbаcks duгing уouг гecοvery.

Triсyclic antideρгessants аnԁ monοаmine
oхidase іnhibіtoгs MAOI ѕ
can аddіtiоnаlly be vегy helpful.


Feel free to νisit my blog post - anxiety attack treatment

Anónimo dijo...

Apагt from the сost сonsideration, thеre
are manу rеasonѕ whу cаnѵas hanԁbag make gгeаt ѕummеr giveaways.
For inѕtance, when I wrotе in ignorant
bliѕs. Νot only were my anсestorsnamed Butler, but I did need something
tο get me into the charаcterѕ' frames of mind, so who did I turn to? If somebody exploitation promotional product as a part of an hour just to get to church.

my weblog :: ladies bags - www.mojatakujna.mk -

Prachi Kalra dijo...

Thanks for sharing such an informative blog on this topic. It has really helped me in getting through this topic SEO Services in India

SS dijo...

Such an amazing post, very informative and I will definitely suggest other people about it for sure.

Mahindra Tractor