IEC<\/a>). ISO\/IEC\u202f15408 establishes evaluation criteria for IT security, while ISO\/IEC\u202f18045, the companion document, defines the methodology for IT security evaluation. For practical purposes, however, they are the same thing.\u00a0<\/p>\nTimely revision\u00a0<\/h3>\n
The recent revision of the standards could not have been more timely, evolving to meet the complex new needs of the age. \u201cThe working group is focusing on technology assurance, testing certification and providing the standards to ensure that the technology itself is secure,\u201d Ba\u00f1\u00f3n says. \u201cThis is a significant part of the solution.\u201d The standards also help to manage information and take a holistic approach, but the basic foundation is that the technology is secure.\u00a0<\/p>\n
In order to succeed in the market, you have to achieve the trust of your customers. This is as true for technology as it is for any other product. With a dizzying array of new products coming on to the market very quickly, such as connected vehicles for example, how can you rely on a connected vehicle that drives by itself if you don\u2019t have assurance that it\u2019s going to work properly?\u00a0\u00a0<\/p>\n
As Ba\u00f1\u00f3n says, with ISO\/IEC\u202f15408 and ISO\/IEC\u202f18045, \u201cwe are providing the best and the only way, which is internationally agreed, on how to test and evaluate the security of products and systems\u201d. He points out that what was once a niche area is now becoming mainstream and the market itself is putting cybersecurity upfront as a requirement. Decision makers and leaders now have to step up and prioritize cyber-risks.\u00a0\u00a0<\/p>\n
Building resilience\u00a0<\/h3>\n
At government level, this is something that is being increasingly recognized. Ba\u00f1\u00f3n says that one positive outcome of this explosion of cybersecurity concerns has led, for example, to new and forthcoming legislation in the European Union to strengthen cybersecurity systems. \u201cThe EU Cybersecurity Act provides a framework for European-wide certification schemes. In the past, if you had to certify the security of your product, you could do that based on national schemes,\u201d he says. \u201cNow, for the first time, there will be a pan-European certification scheme for products and this new scheme is based on ISO\/IEC\u202f15408.\u201d\u00a0<\/p>\n
As he points out, IT security is not new and the past application of the standards has had a positive impact on products in the market. He says: \u201cThose products that have typically achieved compliance with the standards, such as operating systems or network devices, have evolved and improved to the extent that the hackers have had to target \u201ceasier\u201d products\/attack surfaces.\u201d\u00a0<\/p>\n
Compliance with ISO\/IEC\u202f15408 requires a high level of maturity, a high level of resistance against attacks. When we hear news of major cybersecurity breaches today, Ba\u00f1\u00f3n says there is a high chance these hackers are exploiting products that have not been certified or analysed by this standard. \u201cIf you\u2019re a hacker, you tend to look for the weakest link in the chain, and today, the easiest route is via products that have not been certified according to the standard.\u201d\u00a0<\/p>\n
Independent and impartial\u00a0<\/h3>\n
It\u2019s all a matter of trust. Ba\u00f1\u00f3n says: \u201cIn our standards, trust is provided after a very rigorous, independent and impartial review of a product and after a process of evaluation and certification.\u201d Just as you can\u2019t \u2013 and wouldn\u2019t want to \u2013 buy a washing machine that doesn\u2019t comply with safety requirements, compliance with these standards, \u201cwhich are driven by market needs and are the basis of the most successful cybersecurity schemes all over the world\u201d, offers protection from nasty shocks and will deliver peace of mind.\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"
Read more<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-47","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/lloydsun.espain.center\/index.php?rest_route=\/wp\/v2\/posts\/47","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lloydsun.espain.center\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lloydsun.espain.center\/index.php?rest_route=\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/lloydsun.espain.center\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=47"}],"version-history":[{"count":2,"href":"https:\/\/lloydsun.espain.center\/index.php?rest_route=\/wp\/v2\/posts\/47\/revisions"}],"predecessor-version":[{"id":112,"href":"https:\/\/lloydsun.espain.center\/index.php?rest_route=\/wp\/v2\/posts\/47\/revisions\/112"}],"wp:attachment":[{"href":"https:\/\/lloydsun.espain.center\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=47"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lloydsun.espain.center\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=47"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lloydsun.espain.center\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=47"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}