Skip main navigation
Committee

Committee:

CTN 320 - Cybersecurity, privacity and data protection

Secretary:
UNE - ASOCIACIÓN ESPAÑOLA DE NORMALIZACIÓN
Field of Activity:
Standardization of:Cybersecurity, information protection, and data protection covering: - Management systems and frameworks for cybersecurity and information security. - Technical security mechanisms including cryptography, security controls, and protection methods for ICT systems, networks, and devices. - Data protection and privacy including privacy by design and identity management. - Security evaluation and assessment standards for organizations of all sizes. - Competence requirements for cybersecurity and data protection professionals. - Guidelines and methodologies for emerging technologies and regulatory compliance. Scope covers all aspects of the evolving digital information society, from foundational security mechanisms to practical implementation for large enterprises and SMEs.
Structure:

SC 1 Cybersecurity management systems

SC 2 Cryptography and security mechanisms

SC 3 Security evaluation, testing and specification

SC 4 Security services

SC 5 Data protection, privacy and identity management

SC 6 Product security

SC 7 Cryptografy

GT CAV Cybersecurity in automotive (mobility)

GT CIOT IOT cybersecurity

GT CIOT2 Secure IoT-Blockchain Architecture Model

International Relations:

ISO/IEC/JTC 1/SC 27  Information security, cybersecurity and privacy protection

ISO/IEC/JTC 1/SC 44  Consumer protection in the field of privacy by design

CEN/CLC/JTC 13  Cybersecurity and Data Protection

Standards developed by the committee: CTN 320: 89

UNE-EN ISO/IEC 27007:2022 (Ratificada)

Status: VIGENTE2022-03-02

Information security, cybersecurity and privacy protection - Guidelines for information security management systems auditing (ISO/IEC 27007:2020) (Endorsed by Asociación Española de Normalización in February of 2022.)

UNE-EN ISO/IEC 29101:2021 (Ratificada)

Status: VIGENTE2021-11-01

Information technology - Security techniques - Privacy architecture framework (ISO/IEC 29101:2018) (Endorsed by Asociación Española de Normalización in November of 2021.)

UNE-EN ISO/IEC 27017:2021 (Ratificada)

Status: VIGENTE2021-03-01

Information technology - Security techniques - Code of practice for information security controls based on ISO/IEC 27002 for cloud services (ISO/IEC 27017:2015) (Endorsed by Asociación Española de Normalización in March of 2021.)

UNE 320002:2021

Status: VIGENTE2021-02-24

Trusted Architectures for the Exchange of Cyber-threat Intelligence

UNE 320001:2021

Status: VIGENTE2021-01-27

Evaluation methodology LINCE for the cybersecurity of ICT products

UNE 71510:2011

Status: VIGENTE2021-01-19

Applications with the Spanish DNIe. Electronic signature creation and verification. Type 1 for IT platforms that allow an exclusive control of signer’s interfaces, and with a Evaluation Assurance Level «EAL1».

UNE 71511:2011

Status: VIGENTE2021-01-19

Applications with the Spanish DNIe. Electronic signature creation and verification. Type 1 for IT platforms that allow an exclusive control of signer’s interfaces, and with a Evaluation Assurance Level «EAL3»

UNE 71512:2011

Status: VIGENTE2021-01-19

Applications with the Spanish DNIe. Electronic signature creation and verification. Type 2 for personal computers, and with a Evaluation Assurance Level «EAL1»

UNE 71513:2011

Status: VIGENTE2021-01-19

Applications with the Spanish DNIe. Electronic signature creation and verification. Type 2 for personal computers, and with a Evaluation Assurance Level «EAL3»

UNE-ISO/IEC TR 19791:2013 IN

Status: VIGENTE2021-01-19

Information technology. Security techniques. Security assessment of operational systems

UNE-EN ISO/IEC 19790:2020 (Ratificada)

Status: VIGENTE2020-12-23

Information technology - Security techniques - Security requirements for cryptographic modules (ISO/IEC 19790:2012, including corrected version 2015-12)

UNE-EN ISO/IEC 29100:2020 (Ratificada)

Status: VIGENTE2020-09-16

Information technology - Security techniques - Privacy framework (ISO/IEC 29100:2011, including Amd 1:2018) (Endorsed by Asociación Española de Normalización in July of 2020.)

UNE-EN ISO/IEC 27018:2020 (Ratificada)

Status: VIGENTE2020-07-01

Information technology - Security techniques - Code of practice for protection of personally identifiable information (PII) in public clouds acting as PII processors (ISO/IEC 27018:2019) (Endorsed by Asociación Española de Normalización in July of 2020.)

UNE-EN ISO/IEC 27011:2020 (Ratificada)

Status: VIGENTE2020-07-01

Information technology - Security techniques - Code of practice for Information security controls based on ISO/IEC 27002 for telecommunications organizations (ISO/IEC 27011:2016) (Endorsed by Asociación Española de Normalización in July of 2020.)

UNE-EN ISO/IEC 29147:2020 (Ratificada)

Status: VIGENTE2020-07-01

Information technology - Security techniques - Vulnerability disclosure (ISO/IEC 29147:2018) (Endorsed by Asociación Española de Normalización in July of 2020.)

UNE-EN ISO/IEC 30111:2020 (Ratificada)

Status: VIGENTE2020-07-01

Information technology - Security techniques - Vulnerability handling processes (ISO/IEC 30111:2019) (Endorsed by Asociación Española de Normalización in July of 2020.)

UNE-EN ISO/IEC 27019:2020 (Ratificada)

Status: VIGENTE2020-05-01

Information technology - Security techniques - Information security controls for the energy utility industry (ISO/IEC 27019:2017, Corrected version 2019-08) (Endorsed by Asociación Española de Normalización in May of 2020.)

UNE-EN ISO/IEC 29134:2020 (Ratificada)

Status: VIGENTE2020-05-01

Information technology - Security techniques - Guidelines for privacy impact assessment (ISO/IEC 29134:2017) (Endorsed by Asociación Española de Normalización in May of 2020.)

UNE-EN ISO/IEC 27042:2016 (Ratificada)

Status: VIGENTE2016-12-01

Information technology - Security techniques - Guidelines for the analysis and interpretation of digital evidence (ISO/IEC 27042:2015) (Endorsed by AENOR in December of 2016.)

UNE-EN ISO/IEC 27041:2016 (Ratificada)

Status: VIGENTE2016-12-01

Information technology - Security techniques - Guidance on assuring suitability and adequacy of incident investigative method (ISO/IEC 27041:2015) (Endorsed by AENOR in December of 2016.)