The international standard ISO/IEC 27011:2016 sets out guidelines supporting the implementation of information security controls in telecommunications organisations.
It sets out general security control objectives based on ISO/IEC 27002 as well as controls specific to the telecommunications sector, and provides guidelines on selecting and implementing them
Information security management is especially complex for telecommunications organisations.
It must potentially cover network infrastructure, services applications and other facilities; a range of technologies (e.g. wired, wireless and broadband); third parties; and a number of operational scales, service areas and service types.
As well as implementing the controls listed in Annex A of ISO/IEC 27001, telecommunications organisations may therefore need to implement extra controls to adequately manage the risks they face.
Adopting ISO/IEC 27011 will allow telecommunications organisations to meet the baseline information security management requirements for confidentiality, integrity and availability, as well as any other relevant security property.
If you are interested in purchasing a multi-user licence for this standard, please get in touch with us to discuss your requirements. You will receive a watermarked PDF which you will be able to store on an internal network, with access restricted to the predefined number of simultaneous users. Purchasing a multiuser licence grants you permission to print copies of the standard, up to the specified number of users.