Wireless and Mobile Device Security, 2nd Edition

Information Security Standards

How can IT manage all these wireless devices and enforce a common policy? To assist with this and with the broader aspects of IT security, standards have been developed. Two such standards arose from joint subcommittees of the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC), called the ISO/IEC. These voluntary standards, ISO/IEC 27001:2013 and ISO/IEC 27002:2013, address different aspects of and approaches to IT security. The National Institute of Standards and Technology (NIST) developed another standard, the NIST SP 800-53. Mandatory for all unclassified U.S. government-run networks, the NIST SP 800-53 has also become a de facto standard for many foreign ...