Cart (0)
  • No items in cart.
Total
$0
There is a technical issue about last added item. You can click "Report to us" button to let us know and we resolve the issue and return back to you or you can continue without last item via click to continue button.
Home
Content
Tour
eLibrary
Store
Search book title
Filters:
FORMAT
BOOKS
All Books
PACKAGES
All Packages
EDITION
to
PUBLISHER
AABC
(1)
AAMI
(338)
ACI
(589)
AECDAILY
(599)
AISC
(55)
ASA
(234)
ASCE
(1006)
ASHRAE
(690)
ASME
(2161)
ASSE
(117)
ASTM
(95207)
AWC
(58)
AWWA
(575)
BHMA
(124)
BICSI
(33)
BIFMA
(21)
BOMA
(20)
BSI
(95391)
CHD
(3)
CRSI
(17)
IAHSS
(1)
IAPMO
(374)
ICC
(319)
IEEE
(6938)
IES
(241)
ISEA
(21)
Joint Commission
(184)
Joint Commission Int.
(1)
NETA
(6)
NFPA
(1667)
TCNA
(17)
TMS
(19)
USGBC
(28)
WILEY
(4)
 
AR
(6)
AZ
(7)
CA
(115)
CT
(3)
FL
(57)
ID
(5)
IL
(5)
IN
(1)
KY
(1)
LA
(2)
MI
(25)
MN
(27)
NC
(27)
NJ
(13)
NY
(61)
OH
(24)
OR
(22)
PA
(7)
RI
(8)
SC
(20)
SD
(1)
TX
(3)
VA
(50)
VT
(6)
WA
(33)
CONTENT TYPE
 Act
 Admin Code
 Announcements
 Bill
 Book
 CADD File
 CAN
 CEU
 Charter
 Checklist
 City Code
 Code
 Commentary
 Comprehensive Plan
 Conference Paper
 County Code
 Course
 DHS Documents
 Document
 Errata
 Executive Regulation
 Federal Guideline
 Firm Content
 Guideline
 Handbook
 Interpretation
 Journal
 Land Use and Development
 Law
 Legislative Rule
 Local Amendment
 Local Code
 Local Document
 Local Regulation
 Local Standards
 Manual
 Model Code
 Model Standard
 Notice
 Ordinance
 Other
 Paperback
 PASS
 Periodicals
 PIN
 Plan
 Policy
 Product
 Product - Data Sheet
 Program
 Provisions
 Requirements
 Revisions
 Rules & Regulations
 Standards
 State Amendment
 State Code
 State Manual
 State Plan
 State Standards
 Statute
 Study Guide
 Supplement
 Sustainability
 Technical Bulletin
 All
  • BSI
    PD ISO/IEC TS 20540:2018 Information technology. Security techniques. Testing cryptographic modules in their operational environment
    Edition: 2018
    $500.66
    / user per year

Description of PD ISO/IEC TS 20540:2018 2018

This document provides recommendations and checklists which can be used to support the specification and operational testing of cryptographic modules in their operational environment within an organization’s security system.

The cryptographic modules have four security levels which ISO/IEC 19790 defines to provide for a wide spectrum of data sensitivity (e.g. low-value administrative data, million-dollar funds transfers, life-protecting data, personal identity information, and sensitive information used by government) and a diversity of application environments (e.g. a guarded facility, an office, removable media, and a completely unprotected location).

This document includes:

  1. recommendations to perform secure assessing for cryptographic module installation, configuration and operation;

  2. recommendations to inspecting the key management system, protection of authentication credentials, and public and critical security parameters in the operational environment;

  3. recommendations for identifying cryptographic module vulnerabilities;

  4. checklists for the cryptographic algorithm policy, security guidance and regulation, security manage requirements, security level for each of the 11 requirement areas, the strength of the security function, etc.; and

  5. recommendations to determine that the cryptographic module’s deployment satisfies the security requirements of the organization.

This document assumes that the cryptographic module has been validated as conformant with ISO/IEC 19790.

It can be used by an operational tester along with other recommendations if needed.

This document is limited to the security related to the cryptographic module. It does not include assessing the security of the operational or application environment. It does not define techniques for the identification, assessment and acceptance of the organization’s operational risk.

The organization’s accreditation, deployment and operation processes, shown in Figure 1, is not included to the scope of this document.

This document addresses operational testers who perform the operational testing for the cryptographic modules in their operational environment authorizing officials of cryptographic modules.



Standard NumberPD ISO/IEC TS 20540:2018
TitleInformation technology. Security techniques. Testing cryptographic modules in their operational environment
StatusUnder Review
Publication Date2018-06-30
Identical National Standard OfISO/IEC TS 20540:2018
DescriptorsModules, Cryptography, Testing, Security, Information technology
ICS35.030 IT Security
CommitteeIST/33/3
ISBN978 0 580 97472 4
PublisherBSI
Pages48

About BSI

BSI Group, also known as the British Standards Institution is the national standards body of the United Kingdom. BSI produces technical standards on a wide range of products and services and also supplies certification and standards-related services to businesses.
GROUPS
X