Full Description

BS PD ISO/IEC TS 33072:2016: defines a process assessment model (PAM) that meets the requirements of ISO/IEC 33004 and thatsupports the performance of an assessment of process capability by providing indicators for guidance onthe interpretation of the process purposes and outcomes as defined in ISO/IEC TS 33052 and theprocess attributes as defined in ISO/IEC 33020; provides guidance, by example, on the definition, selection and use of assessment indicators.A PAM comprises a set of indicators of process performance and process capability. The indicators are usedas a basis for collecting the objective evidence that enables an assessor to assign ratings. The set ofindicators included in this Technical Specification is not intended to be an all-inclusive set nor is it intended tobe applicable in its entirety.

The PAM in this Technical Specification is directed at assessment sponsors and competent assessors whowish to select a model, and associated documented process method, for assessment (for either capabilitydetermination or process improvement). Additionally it may be of use to developers of assessment models inthe construction of their own model, by providing examples of good information security managementpractices. It can be used by: service providers to assess and improve an Information Security Management System (ISMS); service providers to demonstrate their capability for the design, development, transition and deliveryof services that fulfil information security management requirements.Any PAM meeting the requirements defined in ISO/IEC 33004 concerning models for process assessmentcan be used for assessment. Different models and methods might be needed to address differing businessneeds. The assessment model in this Technical Specification meets all the requirements expressed inISO/IEC 33004.

NOTE Copyright release for the PAM: Users of this Technical Specification may reproduce subclauses 5.2 to 5.27, 6.2, B.2 and B.3 as part of any tool or other material to support the performance of process assessments so that it can be used for its intended purpose.


Cross References:
ISO/IEC IS 12207:2008
ISO/IEC 15289:2011
ISO/IEC 15504-5:2012
ISO/IEC 15504-6:2013
ISO/IEC 20000-1:2011
ISO/IEC TS 20000-4:2010
ISO/IEC TR 24774:2010
ISO/IEC 27001:2013
ISO/IEC 33002:2015
ISO/IEC 33004:2015
ISO/IEC 33020:2015
ISO/IEC TS 33052
ISO/IEC 27000
ISO/IEC 33001


All current amendments available at time of purchase are included with the purchase of this document.

Product Details

Published: 09/30/2016 ISBN(s): 9780580935435 Number of Pages: 194File Size: 1 file , 3.6 MB Product Code(s): 30338473, 30338473, 30338473 Note: This product is unavailable in United Kingdom