ITU - Cybersecurity Gateway - ICT Security Standards Roadmap

ICT Security Standards Roadmap

Promoting collaboration between international standards bodies

The Roadmap was launched by ITU Study Group 17, and became a joint effort in January 2007, when the European Network and Information Security Agency (ENISA) and the Network and Information Security Steering Group (NISSG) joined the initiative. The ICT Security Standards Roadmap promotes the development of security standards by highlighting existing standards, current work and future standards among key standards development organizations. The Roadmap informs users about security standards. It contains five parts:

Part 1:

ICT Standards Development Organizations and Their Work outlines the structure of the Roadmap and describes the different standards organizations, their structure and the work they are undertaking in security standards (including ITU, ISO, IEC, IETF, OAIS, ATIS, ETSI, IEEE, 3GPP and 3GPP2), complete with links to existing glossaries of security.

Part 2:

Approved ICT Security Standards provides a database summarizing the catalogue of approved standards. It contains guidance on how to use the database, a taxonomy, as well as a list of acronyms and abbreviations.

Part 3:

Security standards under development summarizes standards under development by ITU and ISO/IEC (rather than existing standards). It will also describe the inter-relationships between the work of standardization bodies. This catalogue is also being developed as a database.

Part 4:

Future needs and proposed new security standards will outline future areas of work in security standards, where gaps have been identified or proposals made for new standards work.

Part 5:

Best practices was added to the Roadmap in May 2007, as a repository of security related best practices contributed by members and stakeholders. The Roadmap will include the work of other standards organizations in future editions. It is being transformed into a database format.