Source: http://docplayer.net/3778882-Voorbeeld-preview-dit-document-is-een-voorbeeld-van-nen-this-document-is-a-preview-by-nen-nederlandse-praktijkrichtlijn.html
Timestamp: 2017-05-25 01:59:53
Document Index: 601384097

Matched Legal Cases: ['art 3', 'art 3', 'art 1', 'art 2', 'art 3', 'art 4', 'art 5', 'art 3', 'art 1', 'art 2', 'art 3', 'art 2', 'art 2', 'art 1', 'art 4', 'art 4', 'art 2', 'art 2', 'art 1', 'art 2', 'art 2', 'art 1', 'art 1', 'art 4', 'art 9']

Voorbeeld. Preview. Dit document is een voorbeeld van NEN / This document is a preview by NEN. Nederlandse praktijkrichtlijn - PDF
Voorbeeld. Preview. Dit document is een voorbeeld van NEN / This document is a preview by NEN. Nederlandse praktijkrichtlijn
Download "Voorbeeld. Preview. Dit document is een voorbeeld van NEN / This document is a preview by NEN. Nederlandse praktijkrichtlijn"
Claud Chandler
1 Nederlandse praktijkrichtlijn Information technology - Guidelines for the management of IT Security - Part 3: Techniques for the management of IT Security (ISO/IEC TR :1998,IDT) NPR-ISO/IEC TR (en) april 2002 ICS Als Nederlandse praktijkrichtlijn is aanvaard: Dit document mag slechts op een stand-alone PC worden geinstalleerd. Gebruik op een netwerk is alleen. toestaan als een aanvullende licentieovereenkomst voor netwerkgebruik met NEN is afgesloten. This document may only be used on a stand-alone PC. Use in a network is only permitted when a supplementary license agreement for us in a network with NEN has been concluded. - ISO/IEC TR :1998,IDT Normcommissie "IT-Beveiligingstechnieken" Apart from exceptions provided by the law, nothing from this publication may be duplicated and/or published by means of photocopy, microfilm, storage in computer files or otherwise, which also applies to full or partial processing, without the written consent of the Netherlands Standardization Institute. The Netherlands Standardization Institute shall, with the exclusion of any other beneficiary, collect payments owed by third parties for duplication and/or act in and out of law, where this authority is not transferred or falls by right to the Reproduction Rights Foundation. Auteursrecht voorbehouden. Behoudens uitzondering door de wet gesteld mag zonder schriftelijke toestemming van het Nederlands Normalisatie-instituut niets uit deze uitgave worden verveelvoudigd en/of openbaar gemaakt door middel van fotokopie, microfilm, opslag in computerbestanden of anderszins, hetgeen ook van toepassing is op gehele of gedeeltelijke bewerking. Het Nederlands Normalisatie-instituut is met uitsluiting van ieder ander gerechtigd de door derden verschuldigde vergoedingen voor verveelvoudiging te innen en/of daartoe in en buiten rechte op te treden, voor zover deze bevoegdheid niet is overgedragen c.q. rechtens toekomt aan de Stichting Reprorecht. Although the utmost care has been taken with this publication, errors and omissions cannot be entirely excluded. The Netherlands Standardization Institute and/or the members of the committees therefore accept no liability, not even for direct or indirect damage, occurring due to or in relation with the application of publications issued by the Netherlands Standardization Institute. Hoewel bij deze uitgave de uiterste zorg is nagestreefd, kunnen fouten en onvolledigheden niet geheel worden uitgesloten. Het Nederlands Normalisatie-instituut en/of de leden van de commissies aanvaarden derhalve geen enkele aansprakelijkheid, ook niet voor directe of indirecte schade, ontstaan door of verband houdend met toepassing van door het Nederlands Normalisatie-instituut gepubliceerde uitgaven Nederlands Normalisatie-instituut Postbus 5059, 2600 GB Delft Telefoon (015) , Fax (015)2 TECHNICAL REPORT ISO/IEC TR First edition Information technology Guidelines for the management of IT Security Part 3: Techniques for the management of IT Security Technologies de l'information Lignes directrices pour la gestion de sécurité IT Partie 3: Techniques pour la gestion de sécurité IT B C Reference number ISO/IEC TR :1998(E)3 ISO/IEC TR :1998(E) Contents 1 Scope 1 2 References 1 3 Definitions 1 4 Structure 1 5 Aim 1 6 Techniques for the Management of IT Security 2 7 IT Security Objectives, Strategy and Policies IT Security Objectives and Strategy Corporate IT Security Policy 5 8 Corporate Risk Analysis Strategy Options Baseline Approach Informal Approach Detailed Risk Analysis Combined Approach 9 9 Combined Approach High Level Risk Analysis Baseline Approach Detailed Risk Analysis Establishment of Review Boundary Identification of Assets Valuation of Assets and Establishment of Dependencies Between Assets Threat Assessment Vulnerability Assessment Identification of Existing/Planned Safeguards Assessment of Risks Selection of Safeguards Identification of Safeguards IT Security Architecture Identification/Review of Constraints Risk Acceptance IT System Security Policy IT Security Plan Implementation of the IT Security Plan Implementation of Safeguards Security Awareness Needs Analysis Programme Delivery Monitoring of Security Awareness Programmes Security Training Approval of IT Systems Follow-up Maintenance Security Compliance Checking 28 ISO/IEC 1998 All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized in any form or by any means, electronic or mechanical, including photocopying and microfilm, without permission in writing from the publisher. ISO/IEC Copyright Office Case postale 56 CH-1211 Genève 20 Switzerland Printed in Switzerland ii4 ISO/IEC ISO/IEC TR :1998(E) 11.3 Change Management Monitoring Incident Handling Summary 33 Annex A An Example Contents List for a Corporate IT Security Policy 34 Annex B Valuation of Assets 36 Annex C List of Possible Threat Types 38 Annex D Examples of Common Vulnerabilities 40 Annex E Types of Risk Analysis Method 43 iii5 ISO/IEC TR :1998(E) ISO/IEC Foreword ISO (the International Organization for Standardization) and IEC (the International Electrotechnical Committee) form the specialized system for worldwide standardization. National bodies that are members of ISO or IEC participate in the development of International Standards through technical committees established by the respective organization to deal with particular fields of technical activity. ISO and IEC technical committees collaborate in fields of mutual interest. Other international organizations, governmental and non-governmental, in liaison with ISO and IEC, also take part in the work. In the field of information technology, ISO and IEC have established a joint technical committee, ISO/IEC JTC 1. The main task of technical committees is to prepare International Standards, but in exceptional circumstances a technical committee may propose the publication of a Technical Report of one of the following types: type 1, when the required support cannot be obtained for the publication of an International Standard, despite repeated efforts; type 2, when the subject is still under technical development or where for any other reason there is the future but not immediate possibility of an agreement on an International Standard; type 3, when a technical committee has collected data of a different kind from that which is normally published as an International Standard ( state of the art, for example). Technical Reports of types 1 and 2 are subject to review within three years of publication, to decide whether they can be transformed into International Standards. Technical Reports of type 3 do not necessarily have to be reviewed until the data they provide are considered to be no longer valid or useful. ISO/IEC TR , which is a Technical Report of type 3, was prepared by Joint Technical Committee ISO/IEC JTC 1, Information technology, Subcommittee SC 27, IT Security techniques. ISO/IEC TR consists of the following parts, under the general title Information technology Guidelines for the manangement of IT Security: Part 1: Concepts and models for IT Security Part 2: Managing and planning IT Security Part 3: Techniques for the management of IT Security Part 4: Selection of safeguards Part 5: Safeguards for external connections iv6 ISO/IEC ISO/IEC TR :1998(E) Introduction The purpose of ISO/IEC TR is to provide guidance, not solutions, on management aspects of IT security. Those individuals within an organization that are responsible for IT security should be able to adapt the material in ISO/IEC TR to meet their specific needs. The specific objectives of ISO/IEC TR are: to define and describe the concepts associated with the management of IT security, to identify the relationships between the management of IT security and management of IT in general, to present several models which can be used to explain IT security, and to provide general guidance on the management of IT security. ISO/IEC TR is organized into five parts. ISO/IEC TR provides an overview of the fundamental concepts and models used to describe the management of IT security. This material is suitable for managers responsible for IT security and for those who are responsible for the organization's overall security programme. ISO/IEC TR describes management and planning aspects. It is relevant to managers with responsibilities relating to an organization's IT systems. They may be: IT managers who are responsible for overseeing the design, implementation, testing, procurement, or operation of IT systems, or managers who are responsible for activities that make substantial use of IT systems. This part of ISO/IEC TR describes security techniques relevant to those involved with management activities during a project life-cycle, such as planning, designing, implementing, testing, acquisition, or operations. ISO/IEC TR provides guidance on the selection of safeguards, and how this can be supported by the use of baseline models and controls. It also describes how this complements the security techniques described in ISO/IEC TR , and how additional assessment methods can be used for the selection of safeguards. ISO/IEC TR provides guidance to an organization connecting its IT systems to external networks. This guidance includes the selection and use of safeguards to provide security for the external connections and the services supported by those connections, and additional safeguards required for the IT systems because of the connections. v7 8 TECHNICAL REPORT ISO/IEC ISO/IEC TR :1998(E) Information technology Guidelines for the management of IT Security Part 3: Techniques for the management of IT Security 1 Scope This part of ISO/IEC TR provides techniques for the management of IT security. The techniques are based on the general guidelines laid out in ISO/IEC TR and ISO/IEC TR These guidelines are designed to assist the implementation of IT security. Familiarity with the concepts and models introduced in ISO/IEC TR and the material concerning the management and planning of IT security in ISO/IEC TR is important for a complete understanding of this part of ISO/IEC TR References ISO/IEC TR :1996, Guidelines for the management of IT Security Part 1: Concepts and models for IT Security. ISO/IEC TR :1997, Guidelines for the management of IT Security Part 2: Managing and planning IT Security. 3 Definitions For the purposes of this part of ISO/IEC TR 13335, the following definitions given in ISO/IEC TR apply: accountability, asset, authenticity, availability, baseline controls, confidentiality, data integrity, impact, integrity, IT security, IT security policy, reliability, residual risk, risk, risk analysis, risk management, safeguard, system integrity, threat, and vulnerability. 4 Structure This part of ISO/IEC TR is divided into 12 clauses. Clause 5 provides information on the aim of this part of ISO/IEC TR Clause 6 gives an overview of the IT security management process. Clause 7 discusses the importance of a corporate IT security policy and what it should include. Clause 8 provides an overview of four different approaches an organization may use to identify security needs. Clause 9 describes the recommended approach in detail and is followed by a description of safeguard implementation in Clause 10. This clause also includes a detailed discussion of security awareness programmes and the approval process. Clause 11 contains a description on several follow-up activities that are necessary in order to ensure that safeguards are working effectively. Finally, Clause 12 provides a brief summary of this part of ISO/IEC TR Aim The aim of this part of ISO/IEC TR is to describe and recommend techniques for the successful management of IT security. These techniques can be used to assess security requirements and risks, and help to establish and maintain the appropriate security safeguards, i.e. the correct IT security level. The results achieved in this way may need to be enhanced by additional safeguards dictated by the actual organization and environment. This part of ISO/IEC TR is relevant to everybody within an organization who is responsible for the management and/or the implementation of IT security. 19 ISO/IEC TR :1998(E) ISO/IEC 6 Techniques for the Management of IT Security The process of the management of IT security is based on the principles set out in ISO/IEC TR and ISO/IEC TR It can be applied to the whole organization as well as to selected parts of it. Figure 1 shows the major stages in this process, and how the results of this process feed back into the various parts of it. Feedback loops should be established whenever required, be it within a stage, or after one or more of the stages are completed. Figure 1 (below) is a revision of Figure 1 in ISO/IEC TR emphasizing the topics this part of ISO/IEC TR is concentrating on. IT Security Objectives, Strategy and Policy IT Security Objectives and Strategy Corporate IT Security Policy Corporate Risk Analysis Strategy Options Baseline Approach Informal Approach Detailed Risk Analysis Combined Approach Detailed Risk Analysis Combined Approach High Level Risk Analysis Selection of Safeguards Baseline Approach Risk Acceptance IT System Security Policy IT Security Plan Implementation of the IT Security Plan Implementation of Safeguards Security Awareness Approval of IT-Systems Security Training Security Compliance Checking Change Management Follow-Up Maintenance Monitoring Incident Handling Figure 1: Management of IT Security 210 ISO/IEC ISO/IEC TR :1998(E) The management of IT security includes the analysis of the requirements for security, the establishment of a plan for satisfying these requirements, the implementation of this plan, as well as maintenance and administration of the implemented security. This process starts with establishing the organization s IT security objectives and strategy, and the development of a corporate IT security policy. An important part of the IT security management process is the assessment of risks, and how they can be reduced to an acceptable level. It is necessary to take into account the business objectives, as well as organizational and environmental aspects, and each IT system's specific needs and risks. After assessing the security requirements of the IT systems and services, it is advisable to select a corporate risk analysis strategy. The major strategy options are discussed in detail in Clause 8 below. The recommended option involves conducting a high level risk analysis for all IT systems to identify those systems at high risk. These systems are then examined through detailed risk analysis, while a baseline approach is applied for the remaining systems. For the high risk systems, the detailed consideration of assets, threats and vulnerabilities will lead to a detailed risk analysis which facilitates the selection of effective safeguards commensurate with the assessed risks. By using this option, the risk management process can be focused on where the significant risks or greatest needs are, and the overall programme can be made more cost and time effective. Following the risk assessment, appropriate safeguards are identified for each IT system to reduce the risks to an acceptable level. These safeguards are implemented as outlined in the IT security plan. The implementation should be supported by an awareness and training programme, which is important for the effectiveness of the safeguards. Furthermore, the management of IT security includes the ongoing task of dealing with various follow up activities, which can lead to changes to earlier results and decisions. Follow-up activities include: maintenance, security compliance checking, change management, monitoring, and incident handling. 7 IT Security Objectives, Strategy and Policies After establishing the organization's IT security objectives, an IT security strategy should be developed to form a basis for the development of a corporate IT security policy. The development of a corporate IT security policy is essential to ensure that the results of the risk management process are appropriate and effective. Management support across the organization is required for the development and effective implementation of the policy. It is essential that a corporate IT security policy takes into account the corporate objectives and particular aspects of the organization. It must be in alignment with the corporate security policy and the corporate business policy. With this alignment, the corporate IT security policy will help to achieve the most effective use of resources, and will ensure a consistent approach to security across a range of different system environments. It may be necessary to develop a separate and specific security policy for each or some of the IT systems. This policy should be based on risk analysis or baseline results and be consistent with the corporate IT security policy, thus taking into account the security recommendations for the system to which it relates. 311 ISO/IEC TR :1998(E) ISO/IEC 7.1 IT Security Objectives and Strategy As a first step in the process of managing IT security, one should consider the question 'what broad level of risk is acceptable to the organization?'. The correct level of acceptable risks, and thence the appropriate level of security, is the key to successful security management. The necessary broad level of security is determined by the IT security objectives an organization needs to meet. In order to assess these security objectives, the assets and how valuable they are for the organization should be considered. This is mainly determined by the importance that IT has for supporting the conduct of the organization's business; the costs of IT itself is only a small part of its value. Possible questions for assessing how much an organization's business depends on IT are: What are the important/very important parts of the business which cannot be carried out without IT support? What are the tasks which can only be done with the help of IT? What essential decisions depend on the accuracy, integrity, or availability of information processed by IT, or on how up-to-date this information is? What confidential information processed needs to be protected? What are the implications of an unwanted security incident for the organization? Answering these questions can help to assess the security objectives of an organization. If, for example, some important or very important parts of the business are dependent on accurate or up to date information, then one of the security objectives of this organization may be to ensure the integrity and timeliness of the information as it is processed in the IT systems. Also, important business objectives and their relation to security should be considered when assessing security objectives. Dependent on the security objectives, a strategy for achieving these objectives should be agreed upon. The strategy chosen should be appropriate to the value of the assets to be protected. If, for example, the answers to one or more of the questions above is 'Yes', then it is likely that the organization has high security requirements, and it is advisable to choose a strategy which includes sufficient effort to fulfil these requirements. An IT security strategy outlines in general terms how an organisation will achieve its IT security objectives. The topics such a strategy should address will depend on the number, type and importance of those objectives, and normally be those which the organisation considers important to be uniformly addressed throughout the organisation. The topics could be quite specific, or very broad, in nature. As an example of the former, an organisation could have a primary IT security objective that, because of the nature of its business, all of its systems should maintain a high level of availability. In this case, one strategy topic could be directed at minimising virus infestation through organisation-wide installation of anti-virus software (or nominating selected sites for virus checking through which all software received must be passed). To illustrate the latter, at a broad level, an organisation could have an IT security objective, because its business is selling its IT services, that the security of its systems have to be proven to its potential customers. In this case, a strategy topic could be that all systems have to be validated as being secure by a recognised third party. Other possible topics for an IT security strategy, because of specific objectives or combinations thereof, could include: the risk analysis strategy and methods to be adopted organisation-wide, the need for an IT system security policy for each system, the need for security operating procedures for each system, an organisation-wide information sensitivity categorisation scheme, 412 ISO/IEC ISO/IEC TR :1998(E) the need for security conditions of connections to be met, and checked, before other organizations are connected, and the incident handling scheme to be universally used. Once determined, the security strategy and its constituent topics should be encompassed in the corporate IT security policy. 7.2 Corporate IT Security Policy A corporate IT security policy should be produced based on the agreed corporate IT security objectives and strategy. It is necessary to establish and maintain a corporate IT security policy, consistent with the corporate business, security, and IT policies, and security related legislation and regulation. As reflected in 7.1, an important fact influencing the corporate IT security policy is how dependent an organization is on the IT it is using. The more important the use of IT is, and the more an organization has to rely on its IT, the more security is needed to guarantee that the business objectives are met. When writing the corporate IT security policy, the cultural, environmental and organizational characteristics should be borne in mind, since they can influence the approach towards security, e.g. some safeguards, which might be easily accepted in one environment, may be totally unacceptable in another. The security relevant activities described in the corporate IT security policy can be based on the organizational objectives and strategy, the results of previous security risk analysis and management reviews, the results of follow-up actions such as security compliance checking of implemented safeguards, of monitoring and reviewing IT security in day-to-day use, and of reports of security relevant incidents. Any serious threat or vulnerability detected during these activities needs to be addressed, with the corporate IT security policy describing the organization's overall approach to deal with these security problems. The detailed actions are described in the various IT system security policies, or in other supporting documents, for example, security operating procedures. When developing the corporate IT security policy, representatives from the following functions should participate: audit, finance, information systems (technicians and users), utilities/infrastructure (i.e. persons responsible for building structure and accommodation, power, air-conditioning), personnel, security, and senior business management. According to the security objectives, and the strategy an organization has adopted to achieve these objectives, the appropriate level of detail of the corporate IT security policy is selected. As a minimum, the corporate IT security policy should describe: its scope and purpose, the security objectives with respect to legal and regulatory obligations, and business objectives, IT security requirements, in terms of confidentiality, integrity, availability, accountability, authenticity, and reliability of information, the administration of information security, covering organization and individual responsibilities and authorities, the risk management approach which is adopted by the organization, 513 Bestelformulier Stuur naar: NEN Uitgeverij t.a.v. afdeling Marketing Antwoordnummer WB Delft Ja, ik bestel NEN Uitgeverij Postbus GB Delft Vlinderweg AX Delft T (015) F (015) ex. NPR-ISO/IEC TR :2002 en Information technology - Guidelines for the management of IT Security - Part 3: Techniques for the management of IT Security Wilt u deze norm in PDF-formaat? Deze bestelt u eenvoudig via Stel uw vraag aan Klantenservice Gratis nieuwsbrieven Wilt u op de hoogte blijven van de laatste ontwikkelingen op het gebied van normen, normalisatie en regelgeving? Neem dan een gratis abonnement op een van onze nieuwsbrieven. Gegevens Bedrijf / Instelling T.a.v. O M O V Klantnummer NEN Uw ordernummer BTW nummer Postbus / Adres Postcode Plaats Telefoon Fax Factuuradres (indien dit afwijkt van bovenstaand adres) Postbus / Adres Postcode Plaats Datum Handtekening Retourneren Fax: (015) Post: NEN Uitgeverij, t.a.v. afdeling Marketing Antwoordnummer 10214, 2600 WB Delft (geen postzegel nodig). Voorwaarden De prijzen zijn geldig tot 31 december 2015, tenzij anders aangegeven. Alle prijzen zijn excl. btw, verzend- en handelingskosten en onder voorbehoud bij o.m. ISO- en IEC-normen. Bestelt u via de normshop een pdf, dan betaalt u geen handeling en verzendkosten. Meer informatie: telefoon (015) , dagelijks van 8.30 tot uur. Wijzigingen en typefouten in teksten en prijsinformatie voorbehouden. U kunt onze algemene voorwaarden terugvinden op: Normalisatie: de wereld op één lijn. preview Similar documents
Nederlandse norm Information technology - Security techniques - Information security management systems - Requirements (ISO/IEC 27001:2005,IDT) NEN-ISO/IEC 27001 (en) november 2005 ICS 35.040 Dit document More information Voorbeeld. Preview. praktij krichtl ij n. N Nederlands. NPR-ISO/IEC TR I 3335-4 (en)
Nederlandse norm Dit document mag slechts op een stand-alone PC worden geinstalleerd. Gebruik op een netwerk is alleen. toestaan als een aanvullende licentieovereenkomst voor netwerkgebruik met NEN is More information Nederlandse norm. NEN-ISO 22313 (en) Societal security - Business continuity management systems - Guidance (ISO 22313:2012,IDT)
Nederlandse praktijkrichtlijn Software engineering - Product quality - Part 2: External metrics (ISO/IEC TR 9126-2:2003,IDT) NPR-ISO/IEC TR 9126-2 (en) september 2003 ICS 35.080 Als Nederlandse praktijkrichtlijn More information Nederlandse norm. NEN-ISO/IEC 15504-6 (en)
Nederlandse norm Financial services - UNIversal Financial Industry message scheme - Part 2: Roles and responsibilities of the registration bodies (ISO 20022-2:2004,IDT) NEN-ISO 20022-2 (en) april 2005 More information Voorbeeld. Preview. Dit document is een voorbeeld van NEN / This document is a preview by NEN
TECHNICAL SPECIFICATION ISO/IEC TS 17021-3 First edition Dit document mag slechts op een stand-alone PC worden geinstalleerd. Gebruik op een netwerk is alleen. toestaan als een aanvullende licentieovereenkomst More information Voorbeeld. Preview. NEN-ISO 18629-1 (en)
Nederlandse norm Industrial automation systems and integration - Process specification language - Part 1: Overview and basic principles (ISO 18629-1:2004,IDT) NEN-ISO 18629-1 (en) december 2004 ICS 25.040.40 More information Nederlandse norm. NEN-ISO/IEC 27033-1 (en)
INTERNATIONAL STANDARD ISO 14518 First edition 2005-02-01 Cranes Requirements for test loads Dit document mag slechts op een stand-alone PC worden geinstalleerd. Gebruik op een netwerk is alleen. toestaan More information Voorbeeld. norm. Preview. NEN-ISO/IEC 13642 (en)
Nederlandse norm Informatietechnologie - Elementen van de managementinformatie met betrekking tot de fysieke OS I-laag (ISO/IEC 13642:1999,IDT) NEN-ISO/IEC 13642 (en) Information technology - Elements More information Nederlandse praktijkrichtlijn
Vervangt NPR-CEN/TR 14709:2003 Ontw. Nederlandse praktijkrichtlijn Dit document mag slechts op een stand-alone PC worden geinstalleerd. Gebruik op een netwerk is alleen. toestaan als een aanvullende licentieovereenkomst More information Voorbeeld. Preview. NEN-ISO 11154-4 (en) Road vehicles - Roof load carriers - Part 4: Magnetic fixing devices (ISO 11154-4:2004,IDT)
Nederlandse norm Road vehicles - Roof load carriers - Part 4: Magnetic fixing devices (ISO 11154-4:2004,IDT) NEN-ISO 11154-4 (en) juli 2005 ICS 43.040.60 Als Nederlandse norm is aanvaard: Dit document More information Preview INTERNATIONAL STANDARD. Ergonomics - System of auditory and visual danger and information signals IS0
INTERNATIONAL STANDARD IS0 11429 First edition 1996-I 2-l 5 Dit document mag slechts op een stand-alone PC worden geinstalleerd. Gebruik op een netwerk is alleen. toestaan als een aanvullende licentieovereenkomst More information Voorbeeld. Preview. NEN-IEC 62264-2 (en) Enterprise-control system integration - Part 2: Object mode attributes (IEC 62264-2:2004,IDT)
Nederlandse norm Enterprise-control system integration - Part 2: Object mode attributes (IEC 62264-2:2004,IDT) NEN-IEC 62264-2 (en) augustus 2004 ICS 25.040.40; 35.240.50 Als Nederlandse norm is aanvaard: More information Nederlandse norm NEN-ISO 16792. (en) Technical product documentation - Digital product definition data practices (ISO 16792:2006,IDT)
INTERNATIONAL STANDARD ISO 10018 First edition 2012-09-01 Quality management Guidelines on people involvement and competence Dit document mag slechts op een stand-alone PC worden geinstalleerd. Gebruik More information Nederlandse norm. NEN-ISO 37500 (en) Guidance on outsourcing (ISO 37500:2014,IDT) Richtlijn bij outsourcing (ISO 37500:2014,IDT)
Dit document mag slechts op een stand-alone PC worden geinstalleerd. Gebruik op een netwerk is alleen. toestaan als een aanvullende licentieovereenkomst voor netwerkgebruik met NEN is afgesloten. This More information Voorbeeld. Preview ISO/IEC 13818-1 INTERNATIONAL STANDARD
INTERNATIONAL STANDARD ISO/IEC 13818-1 Fourth edition 2013-06-15 AMENDMENT 3 2014-04-15 Dit document mag slechts op een stand-alone PC worden geinstalleerd. Gebruik op een netwerk is alleen. toestaan als More information Voorbeeld. Preview ISO 9001 INTERNATIONAL STANDARD. Quality management systems Requirements
INTERNATIONAL STANDARD ISO 9001 Fourth edition 2008-11-15 Corrected version 2009-07-15 Quality management systems Requirements Dit document mag slechts op een stand-alone PC worden geinstalleerd. Gebruik More information Voorbeeld. Preview. NEN-ISO/IEC 14496-18 (en)
Nederlandse norm Software engineering - IFPUG 4.1 - Unadjusted functional size measurement method - Counting practices manual (ISO/IEC 20926:2003,IDT) NEN-ISO/IEC 20926 (en) november 2003 ICS 35.080 Als More information Nederlandse norm. NEN-EN 15975-1 (en) Veiligheid van drinkwater levering - Richtlijnen voor risico- en crisismanagement - Deel 1: Crisismanagment
Nederlandse norm Informatietechnologie - Code voor informatiebeveiliging (ISO/IEC 17799:2000,IDT) NEN-ISO/IEC 17799 (en) Information technology - Code of practice for information security management (ISO/IEC More information Voorbeeld. Preview. Disability Care. Certification scheme >
Certification scheme > Disability Care Version 2008 Dit document mag slechts op een stand-alone PC worden geinstalleerd. Gebruik op een netwerk is alleen. toestaan als een aanvullende licentieovereenkomst More information Nederlandse praktijkrichtlijn. NPR-ISO/TS 13606-4 (en)
Dit document mag slechts op een stand-alone PC worden geinstalleerd. Gebruik op een netwerk is alleen. toestaan als een aanvullende licentieovereenkomst voor netwerkgebruik met NEN is afgesloten. This More information INTERNATIONAL STANDARD. Control charts Part 1: General guidelines. Cartes de contrôle Partie 1: Lignes directrices générales
INTERNATIONAL STANDARD ISO 7870-1 First edition 2007-10-01 Dit document mag slechts op een stand-alone PC worden geinstalleerd. Gebruik op een netwerk is alleen. toestaan als een aanvullende licentieovereenkomst More information Voorbeeld. Preview. NEN-ISO 15544 (en)
Nederlandse norm Aardolie- en aardgasindustrie - Buitengaatse productie-installaties - Eisen en richtlijnen voor noodresponsie (ISO15544:2000,IDT) NEN-ISO 15544 (en) Petroleum and natural gas industries More information Geographic information - Simple feature access - Part 2: SQL option (ISO 19125-2:2004,IDT) augustus 2004 ICS 35.240.70
Nederlandse norm Geografische informatie - Toegang tot eenvoudige entiteiten - Deel 2: SQL optie (ISO 19125-2:2004,IDT) NEN-ISO 19125-2 (en) Geographic information - Simple feature access - Part 2: SQL More information juni 2004 ICS 01.080.20; 43.040.30 Vervangt NEN-ISO 2575:2000/A4:2001; NEN-ISO 2575:2000/A1:2001; NEN-ISO 2575:2000/C1:2001; NEN- ISO 2575:2000
INTERNATIONAL STANDARD ISO 3129 Second edition 2012-02-01 Dit document mag slechts op een stand-alone PC worden geinstalleerd. Gebruik op een netwerk is alleen. toestaan als een aanvullende licentieovereenkomst More information Nederlandse norm. NEN-EN 9100 (en)
Nederlandse norm Dit document mag slechts op een stand-alone PC worden geinstalleerd. Gebruik op een netwerk is alleen. toestaan als een aanvullende licentieovereenkomst voor netwerkgebruik met NEN is More information Nederlandse praktijkrichtlijn. NPR-ISO/IEC TS 24790 (en)
INTERNATIONAL STANDARD ISO 13327 First edition 1998-09-01 Dit document mag slechts op een stand-alone PC worden geinstalleerd. Gebruik op een netwerk is alleen. toestaan als een aanvullende licentieovereenkomst More information Voorbeeld. Preview. NPR-IEC/TR 61926-1-1 (en) Ontwerpautomatisering - Deel 1-1: Harmonisatie van ATLAS proeftalen (IEC/TR 61926-1 -1:1999,IDT)
Nederlandse praktijkrichtlijn Ontwerpautomatisering - Deel 1-1: Harmonisatie van ATLAS proeftalen (IEC/TR 61926-1 -1:1999,IDT) NPR-IEC/TR 61926-1-1 (en) Design automation - Part 1-1: Harmonization of ATLAS More information Voorbeeld. Preview ISO 15501-1 INTERNATIONAL STANDARD. Road vehicles Compressed natural gas (CNG) fuel systems Part 1: Safety requirements
INTERNATIONAL STANDARD ISO 15501-1 First edition 2001-10-15 Dit document mag slechts op een stand-alone PC worden geinstalleerd. Gebruik op een netwerk is alleen. toestaan als een aanvullende licentieovereenkomst More information Dit document bevat de officiële Engelse versie van de Europese norm EN 834, oktober 1994.
,(&3$6 Edition 1.0 2000-08 Lead integrity test method Dit document mag slechts op een stand-alone PC worden geinstalleerd. Gebruik op een netwerk is alleen. toestaan als een aanvullende licentieovereenkomst More information TECHNICAL REPORT. Solar Energy - Field Pyranometers - Recommended practice for use
TECHNICAL REPORT Is0 TR 9901 First edition 1990-08-O a Dit document mag slechts op een stand-alone PC worden geinstalleerd. Gebruik op een netwerk is alleen. toestaan als een aanvullende licentieovereenkomst More information Nederlandse praktijkrichtlijn. NPR-CR 14380 (en) Toegepaste verlichtingstechnieken - Tunnelverlichting Preview
Nederlandse praktijkrichtlijn Dit document mag slechts op een stand-alone PC worden geinstalleerd. Gebruik op een netwerk is alleen. toestaan als een aanvullende licentieovereenkomst voor netwerkgebruik More information Nederlandse norm. NEN-EN-IEC 62305-2 (en) Bliksembeveiliging - Deel 2: Risicomanagement (IEC 62305-2:2010,IDT) Preview
INTERNATIONAL STANDARD ISO/IEC 19752 First edition 2004-06-15 Corrected version 2004-09-15 Dit document mag slechts op een stand-alone PC worden geinstalleerd. Gebruik op een netwerk is alleen. toestaan More information Nederlandse praktijkrichtlijn NPR-CEN/TS 15531-2. (en)
Nederlandse norm Vlakglas voor gebouwen - Bepaling van de lichttoetreding, de directe zontoetreding, de totale zonneenergietoetreding, de ultraviolettoetreding en de hiermee samenhangende factoren (ISO More information Voorbeeld. Preview. NPR-IEC/PAS 62050 (en) Board level drop test method of components for handheld electronic products (IEC/PAS 62050:2004,IDT)
Nederlandse praktijkrichtlijn Board level drop test method of components for handheld electronic products (IEC/PAS 62050:2004,IDT) NPR-IEC/PAS 62050 (en) Voorbeeld december 2004 ICS 31.080.01 Als Nederlandse More information Nederlandse norm. NEN-ISO 24097-1 (en)
Dit document mag slechts op een stand-alone PC worden geinstalleerd. Gebruik op een netwerk is alleen. toestaan als een aanvullende licentieovereenkomst voor netwerkgebruik met NEN is afgesloten. This More information Netherlands technical agreement. NTA 7379 (en) Guidelines for Predictive emission monitoring systems (PEMS) - Execution and quality assurance
INTERNATIONAL STANDARD ISO 13053-2 First edition 2011-09-01 Dit document mag slechts op een stand-alone PC worden geinstalleerd. Gebruik op een netwerk is alleen. toestaan als een aanvullende licentieovereenkomst More information Nederlandse norm NEN-ISO 15745-4/A2. (en)
INTERNATIONAL STANDARD ISO 9012 Second edition 1998-09-15 Dit document mag slechts op een stand-alone PC worden geinstalleerd. Gebruik op een netwerk is alleen. toestaan als een aanvullende licentieovereenkomst More information Voorbeeld B C. Preview ISO/IEC 9834-3 INTERNATIONAL STANDARD
INTERNATIONAL STANDARD ISO/IEC 9834-3 Second edition 1998-10-01 Dit document mag slechts op een stand-alone PC worden geinstalleerd. Gebruik op een netwerk is alleen. toestaan als een aanvullende licentieovereenkomst More information Voorbeeld. Preview. Road vehicles Communication between vehicle and external equipment for emissions-related diagnostics. Part 4:
INTERNATIONAL STANDARD ISO 15031-4 Second edition 2014-02-15 Dit document mag slechts op een stand-alone PC worden geinstalleerd. Gebruik op een netwerk is alleen. toestaan als een aanvullende licentieovereenkomst More information Voorbeeld. Preview ISO/PAS 28002 PUBLICLY AVAILABLE SPECIFICATION
PUBLICLY AVAILABLE SPECIFICATION ISO/PAS 28002 First edition 2010-09-01 Dit document mag slechts op een stand-alone PC worden geinstalleerd. Gebruik op een netwerk is alleen. toestaan als een aanvullende More information Voorbeeld. Preview. NEN-ISO/IEC 9075-9/C1 (en) Correctieblad
Nederlandse norm Information technology - Database languages - SQL - Part 9: Management of External Data (SQL/MED) (ISO/IEC 9075-9:2001/Cor 1:2003,IDT) Correctieblad NEN-ISO/IEC 9075-9/C1 (en) juli 2003 More information Voorbeeld. Preview ISO 15031-6 INTERNATIONAL STANDARD
INTERNATIONAL STANDARD ISO 15031-6 Second edition 2010-08-15 Dit document mag slechts op een stand-alone PC worden geinstalleerd. Gebruik op een netwerk is alleen. toestaan als een aanvullende licentieovereenkomst More information Nederlandse praktijkrichtlijn. NPR-IEC/TR 80001-2-2 (en)
EUROPEAN COMMITTEE FOR STANDARDIZATION COMITÉ EUROPÉEN DE NORMALISATION EUROPÄISCHES KOMITEE FÜR NORMUNG WORKSHOP CWA 14167-2 AGREEMENT March 2002 ICS 03.120.20; 35.040 Dit document mag slechts op een More information Dutch Technical Agreement. NTA 8200 (en) Best practice list for biomass fuel and ash analysis Preview
Dutch Technical Agreement Dit document mag slechts op een stand-alone PC worden geinstalleerd. Gebruik op een netwerk is alleen. toestaan als een aanvullende licentieovereenkomst voor netwerkgebruik met More information Voorbeeld. Preview ISO/TR 14105 TECHNICAL REPORT
TECHNICAL REPORT ISO/TR 14105 First edition 2001-10-15 Dit document mag slechts op een stand-alone PC worden geinstalleerd. Gebruik op een netwerk is alleen. toestaan als een aanvullende licentieovereenkomst More information 2017 © DocPlayer.net Privacy Policy | Terms of Service | Feedback