Securing our digital lives

Organizing chaos and safeguarding data

By Janice Blondeau

As information technology becomes ever more pervasive in our daily lives, one large group of experts is at the forefront in helping to secure our digital environment. Their work covers fields such as data security, cloud computing, mitigating cyberthreats, audiovisual and multimedia advances – all within the remit of ISO/IEC Joint Technical Committee (JTC) 1: Information technology and its Subcommittees.

 Cloud world keyboard Cloud computing offers significant advantages but also presents a number of serious challenges

More than 2 000 experts from 163 countries come together within ISO/IEC JTC 1 to develop mutually beneficial guidelines that encourage global trade while protecting intellectual property.

Enhancing cybersecurity

A new JTC 1 International Standard ISO/IEC 27040:2015, Information technology -Security techniques - Storage security, helps to ensures that an individual’s, a company’s or an organization’s valuable information stays in safe hands. (See Better safe than sorry in this issue for more information)

Organizing chaos in the cloud

We hear about ‘the Cloud’ every day as its significance for businesses and for individuals grows. Although cloud computing is seen as offering significant economic advantages it also presents a number of serious challenges. JTC 1 work has seen the development of the first cloud computing International Standards, which provide a sound foundation in this fast-evolving technological field.

Speaking the same language

Two International Standards published at the end of 2014 provide definitions of common terms and descriptions of how different elements of cloud computing relate to one another. These two Standards also help improve communication between vendors and customers and provide a basis for emerging and future cloud computing Standards.

ISO/IEC 17788:2014, Cloud computing – Overview and vocabulary, provides definitions of common cloud computing terms, including those for cloud service categories and specifies the terminology for cloud deployment models such as “public” and “private” cloud.

ISO/IEC 17789:2014, Cloud computing – Reference architecture, contains diagrams and descriptions of how the various aspects of cloud computing relate to one another, including the cloud computing roles, activities, and the functional components and their relationships.

ISO/IEC JTC 1/Subcommittee (SC) 38 was responsible for developing these two Standards.

Many issues to be resolved

Cloud computing is still relatively young, even if it is growing at a rapid pace. Some key issues have already emerged and more will undoubtedly appear. The IEC, through its work in JTC 1, is helping to create a solid Standards-based foundation for cloud computing.

cybersecurity key ISO/IEC 27040 helps ensure that anyone's valuable information stays in safe hands
 Cloud world keyboard Cloud computing offers significant advantages but also presents a number of serious challenges
digital abstraction Two recent ISO/IEC JTC 1 Standards on cloud computing cover definitions of common terms and reference architecture