ISMF Standard 21 (Security in job and person Human specifications) Resources ISMF Standard 22 (Personnel screening) ISMF Standard 24 (Management and supervisory obligations) Business ISMF Standard 25 (Ongoing security awareness) Owners ISMF Standard 26 (Disciplinary process) ISMF Standard 28 (Return of assets) Business ISMF Standard 29 (Removal of access) Owners ISMF Standard 31 (Reporting vulnerabilities) Business ISMF Standard 140 (Notifiable Incidents) Owners and ISMF Standard 32 (Incident management) Security ISMF Standard 34 (Evidence) ISMF Standard 36 (Physical access control) Building ISMF Standard 37 (Security of offices and facilities) Management ISMF Standard 39 (Delivery and loading areas) ISMF Standard 40 (Equipment site selection) Business ISMF Standard 45 (Secure disposal or re-use) Owners ISMF Standard 46 (Removal of property) ISMF Standard 48 (Change management) Responsible ISMF Standard 50 (Separation of test, development and Parties production environments) Procurement ISMF Standard 51 (Security in party service delivery) and Security Business ISMF Standard 53 (System acceptance) Owners ISMF Standard 54 (Malware and prevention) Responsible ISMF Standard 141 (Endpoint protection) Parties Responsible ISMF Standard 56 (Archives and backups) Parties ISMF Standard 57 (Network security) Responsible ISMF Standard 58 (Network services) Parties ISMF Standard 59 (Portable Storage Devices) Business ISMF Standard 60 (Sanitisation and/or disposal of media) Owners ISMF Standard 64 (Media in transit) Business ISMF Standard 65 (Messaging and social networking) Owners ISMF Standard 69 (E-commerce) Responsible ISMF Standard 73 (Administrator and operator logs) Parties Responsible ISMF Standard 76 (Access Control) Parties
Human Resources ISMF Standard 21 (Security in job and person specifications) ISMF Standard 22 (Personnel screening) Business Owners ISMF Standard 24 (Management and supervisory obligations) ISMF Standard 25 (Ongoing security awareness) ISMF Standard 26 (Disciplinary process) Business Owners ISMF Standard 28 (Return of assets) ISMF Standard 29 (Removal of access) Business Owners and Security ISMF Standard 31 (Reporting vulnerabilities) ISMF Standard 140 (Notifiable Incidents) ISMF Standard 32 (Incident management) ISMF Standard 34 (Evidence) Building Management ISMF Standard 36 (Physical access control) ISMF Standard 37 (Security of offices and facilities) ISMF Standard 39 (Delivery and loading areas) Business Owners ISMF Standard 40 (Equipment site selection) ISMF Standard 45 (Secure disposal or re-use) ISMF Standard 46 (Removal of property) Responsible Parties ISMF Standard 48 (Change management) ISMF Standard 50 (Separation of test, development and production environments) Procurement and Security ISMF Standard 51 (Security in party service delivery) Business Owners ISMF Standard 53 (System acceptance) Responsible Parties ISMF Standard 54 (Malware and prevention) ISMF Standard 141 (Endpoint protection) Responsible Parties ISMF Standard 56 (Archives and backups) Responsible Parties ISMF Standard 57 (Network security) ISMF Standard 58 (Network services) Business Owners ISMF Standard 59 (Portable Storage Devices) ISMF Standard 60 (Sanitisation and/or disposal of media) Business Owners ISMF Standard 64 (Media in transit) ISMF Standard 65 (Messaging and social networking) ISMF Standard 69 (E-commerce) Responsible Parties ISMF Standard 73 (Administrator and operator logs) Responsible Parties ISMF Standard 76 (Access Control)
ISMF-v3.3.docx