New ISO/IEC 16350 – IT Application Management

ISO/IEC 16350, “Information technology — Systems and software engineering — Application management,” has just been released.  The new 1st Edition is available from Document Center Inc. in paper format, for pdf download, and as part of our Standards Online subscription service.  It provides software developers with a framework for supporting software applications throughout the entire life-cycle of the product.

Life-cycle support is a concept that has become “top of mind” in many disiplines over the last several years.  It’s no different in the world of IT, where programs may be used for decades!  So software developers should be aware that just because the initial release of an application has been made, there are still on-going management concerns and costs that will occur as long as the application is supported.

First, the organization must support the use and operation of the application.  Then the organization must update the application for various reasons.  These updates can be fixes, patches, and new releases with additional features.  In this standard, these activities are termed “application management.”

While I think of software development as the happy scenario of write the code, sell the product, and watch the money roll in, the standard suggests that in fact more money, time and effort is spent maintaining a software application than is spent generating it in the first place.  So having a process for identifying necessary activities and the associated work flows is essential to success.

Your ISO/IEC 16350 standard starts with the usual scope, definitions and referenced documents sections.  However, early in the publication a section on conformance is added.  These first 4 sections really pack in a lot of material on the basic concepts of actions, challenges and opportunities found in taking an active management oversight stance for the application’s lifecycle.  And although there are no referenced documents at all, the text has extensive links with both ISO/IEC 20000-1 and ISO/IEC 12207.   So you’ll be able to use this new release in support of your ISO certification requirements if you’re registered.  FYI: Annex D reviews the relationship of this standard with ISO/IEC 15504-8 as well.

The main body of the ISO/IEC 16350 covers application management processes in detail.  It has sections on support, software maintenance and renewal, application change, control and distribution, management processes, strategy, and organizational concerns.   Exerpts from the two ISO/IEC “referenced” documents are found in boxed format, with detailed information on where the external requirements match up with the system found in this document.

I’ve already mentioned Annex D.  Annex A is informative, covering explanatory statements.  Annex B has required information on the tailoring process.   Annex C is on the Process Reference Model used for assessment purposes.  Annex E is a table like Annex D, this time on where the references to ISO/IEC 20000-1 and ISO/IEC 12207 are made. A 15-item bibliography completes the document.

Interestingly enough, the ISO/IEC 16350 started out as a Dutch standard, NEN 3434.  Now that the ISO/IEC publication has been made, the Dutch national standard will be withdrawn.

How can you get your copy of the new ISO/IEC 16350?  You’ll need to use an authorized distributor since the standard is covered by copyright.  Document Center Inc. is such an organization with our standards catalog and store located at www.document-center.com.  Here is a link directly to the order page for ISO/IEC 16350.  Want more information or help with your order?  Contact our staff by phone (650-591-7600), fax (650-591-7617) or email (info@document-center.com).  We’re here to help you, so make us your Standards Experts!

New EN ISO 11137-1 2015 Edition available now

EN ISO 11137-1, “Sterilization of health care products. Radiation. Requirements for development, validation and routine control of a sterilization process for medical devices,” is now available as the 2015 Edition.   You’ll have a number of ordering options, as the document will be available in a national edition from each of the EU countries.  This is a new revision of the publication and replaces the 2006 Edition (as well as the 2006 Edition with Amendment A1), both of which are now obsolete.

What will you find in the new 2015 Edition of the EN ISO 11137-1?  This new edition provides you with the same core ISO standard — It’s still identical to ISO 11137-1 1st Edition (2006) with Amendment 1 (2013.)  So it’s no surprise that the changes center on those Z Annexes that have become so important, particularly for those of you in the business of medical devices.  Let’s talk about the additional language that’s been added to each of the 3 Annexes.

There are 3 Z Annexes in the EN ISO 11137-1.   As before, they correspond to the 3 Directives that include EN ISO 11137-1 as part of their Harmonized List of Standards.  ZA relates to 90/385/EEC (Active Implantable Medical Devices), ZB is for the 93/42/EEC (Medical Devices), and ZC is for the 98/79/EC (in vitro Diagnostic Medical Devices.)  In this new Edition, the basic correlation remains the same, however there are significant changes in the preliminary notes and the tabular column on remarks for each.

The first thing you’ll notice in each Annex is that 4 notes have been added.  It’s no surprise that the first two notes have to do with risk assessment.  Note 1 reaffirms that your risks have to be reduced according to the language of the various essential requirements of the directive.  Note 2 informs you that your policy for determining that risk also has to be in compliance with the essential requirements.

Another question that we often get with our Document Center Inc. customers is what edition should be choosen for compliance.  That is, should I purchase the ISO 11137-2 or the EN ISO 11137-2, for example.  There is a new table in the European forward to this ISO adoption.  This table provides you with the European equivalent for any ISO standard referenced in the text, where one is available.  Note 3 informs you that only those European adoptions of referenced ISO standards will be acceptable.

Finally, Note 4 tackles the issue of essential requirements that are not addressed in the relevant Z Annex.  You will want to remember, as noted here, that if an essential requirement is not mentioned in the Z Annex, it is not fulfilled by using the standard.  So you’ll still have work to do to meet the balance of the applicable Directive’s requirements.

As I’ve mentioned before, the use of standards to fulfill the mandates of legislation by the Europeans has been a large step towards simplifying the process of compliance in many instances.  However, with the discovery of the “gap” in the level of risk management in medical device directives and in the harmonized standards that support them has called the concept of “presumption of conformity” into question.

As industry and regulators struggle to bring the legislation and supporting standards back into harmony, we will continue to see these types of updates occurring.  With the impact that this situation has had on industry, you can bet that all parties are struggling to get the system working originally envisioned as soon as possible.

Meantime, you’ll need a copy of this new edition for any medical device products that you intend on selling in Europe.  Although the official publication of the adoption of this new Edition has not yet been made, it is expected.

There are a number of national adoptions that you can choose from for your copy.  Here at Document Center Inc., we offer the SS EN ISO 11137-1 2015 Edition in paper format, for pdf download, and as part of our Standards Online multiuser subscription service.  This is also the lowest priced edition in our catalog, so we’re glad to have it available for you.  If you prefer, you can certainly purchase the BS EN ISO 11137-1 2015 Edition.  This is available in paper format only.  There will also be a DIN EN ISO 11137-1 2015 Edition available, but it has not been released yet.

Here’s the order page for SS EN ISO 11137-1, the order page for BS EN ISO 11137-1 and the order page for DIN EN ISO 11137-1.  You’ll also want to be aware that the EN ISO 11137-2 has recently been updated as well and copies for all 3 national adoptions are available.

Remember, Document Center Inc. has been selling standards since 1982.  You’ll find an extensive catalog of standards to choose from on our website, www.document-center.com.  If you have questions, you can work with one of our sales staff by contacting them by phone (650-591-7600), fax (650-591-7617) or email (info@document-center.com).  We’re your Standards Experts!

Pre-order AWS D1.1/D1.1M 2015 Now!

AWS D1.1/D1.1M, “Structural Welding Code – Steel,” 2015 Edition, is going to be released soon.  Pre-order your copy of this important update from Document Center Inc. now.  There’s extensive revisions in this new edition of one of AWS’s most important welding codes.  So don’t delay in making your move to the new edition.

Of course, since the code has not been updated since 2010, there’s numerous editorial changes to the text and commentary, making it easier for you to understand the requirements of the various provisions.  But there’s also many sections of the Code that have had technical updates.  So let’s take a look at the areas that AWS is bringing to industry’s attention:

General:  A “Tubular Structures” clause has been added, AWS-A5.36/A5.36M (Specification for Carbon and Low-Alloy Steel Flux Cored Electrodes for Flux Cored Arc Welding and Metal Cored Electrodes for Gas Metal Arc Welding) is now referenced, and the reference to ASTM A709 has been changed for steels not recommended for PWHT.

Design:  Calculation of effective throat of a combination PJP flare bevel groove weld and fillet weld has been clarified.  There are additional provisions for wrapping welds on opposite sides of a common plane to permit seal welding.  And the code has been harmonized with AISC 360 for fatigue curve cases and figures.

Qualification and Prequalification:  A number of figures have been added, and a number of tables have been reorganized.  CVN Test requirements for sub-sized specimens are now clarified.

Fabrication:  A number of changes have been made.  These include updating the requirements for backing and for substrate cleanliness, to the location and sequence of member and element splices, and several additional clarifications.

Inspection:  Retesting requirements based on the quality of the work is clarified.  A number of changes have also occurred for the requirements and tables for U/T equipment.

Annexes:  Your sample forms have been changed extensively.  Terms and definitions are now “normative.”  Since Clause 1 contains safety requirements, safe practices are not part of the Annexes any longer.  Clarification of effective throat for various joint types and combinations is now provided.

The AWS Structural Welding Code for Steel is widely used throughout many industries.  Don’t miss this important update to the AWS D1.1/D1.1M code!  Contact Document Center Inc. staff by phone (650-591-7600), fax (650-591-7617) or email (info@document-center.com) to place your pre-order.  Or just use our website www.document-center.com to order online!  Here’s a link directly to the order page for the AWS D1.1/D1.1M for your convenience.

Document Center Inc. has been helping folks like you manage and maintain standards collections since 1982.  Make us your Standards Experts!

What is the ANAB?

What is the ANAB?  This is a question that comes up when our Document Center  customers are getting ready for management system certification.  If you’re interested in certification and want to know about the ANAB, today I’m posting an overview of the organization.  If you’ve been ISO certified and want to know what happened to the old RAB (Registrar Accreditation Board), I’ll answer that question too.

ANAB is a jointly owned non-profit NGO co-owned by ANSI and ASQ.  There are three main “brands” that have recently been integrated into one service.  They are ACLASS for medical laboratories, ANAB for management systems, and FQS for forensic test labs.  The services of the former RAB (Registration Accreditiation Board) now fall under the umbrella of the rebranded ANAB.

The organization began with the establishment of the RAB in 1989.  Run by ASQ (American Society for Quality), it provided auditor certification for such programs as the ISO 9000 quality and the ISO 14000 environmental management systems.  In 2005, the RAB was transferred to a joint ANSI-ASQ National Accreditation Board (called the ANAB) which included both certification and training.

During the last few years, the joint board acquired a number of other certification accreditors.  With so many different types of accreditation available, ANSI and ASQ decided to consolidate their services this year under the umbrella designation ANAB, American National Accreditation Board.  This means that a wide range of registration services are now covered by the ANAB.  Included in the ANAB portfolio are the following types of certificiations:

  • ISO 9001 quality management systems
  • ISO 14001 environmental management systems
  • ISO 13485 medical device quality management systems
  • ISO/IEC 20000-1 information technology service management systems
  • ISO 22000 food safety management systems
  • ISO/IEC 27001 information security management systems
  • ISO 28000 supply chain security management systems
  • ISO 50001 energy management systems
  • ISO 55001 asset management systems
  • ISO 20121 event sustainability management systems
  • ANSI/AIHA Z10, CSA Z1000, and BS OHSAS 18001 occupational health and safety management systems
  • Aerospace ICOP
  • TL 9000 quality management systems
  • Recycling Industry Operating Standard
  • e-Stewards Standard
  • Responsible Recycling
  • AS5553 and AS6081 for avoidance of counterfeits
  • IECQ QC 08000 hazardous substance process management
  • ASIS SPC.1, ASIS/BSI BCM.01, BS 25999-2, and NFPA 1600 PS-Prep and preparedness
  • Sustainable Forestry Initiation
  • American Tree Farms System
  • BA 9001 body armor quality management systems
  • SQFI Ethical Sourcing
  • Private security company management systems

And services for DoD Environmental Laboratory Accreditation Program (ELAP) and IFS Food Store Inspection Accreditation have just been added.

The ANAB itself is accredited to ISO/IEC 17011.  This means that every 4 years the processes and practices of the NGO are reviewed and certified.  Additionally, ANAB has links to the International Accreditation Bodies ILAC (International Laboratory Accreditation Cooperation) and APLAC (Asia Pacific Laboratory Acceditation Cooperation.)  So many times your certification by a U.S. organization that is ANAB registered will be recognized in other jurisdictions.

Why might ANAB registration be important to you?  With ANAB registration, your certification provider shows you that they can meet their requirements in just the same way that you’ll be expected to.  It’s like knowing that your doctor is board certified!  Also, by using the list of organizations that have the ANAB registration, you may be able to get competing quotes for your certification in order to find the organization that will work best for you.

To look for an organization that has been accredited by the ANAB, check out this Link to the Certified Bodies Directory.  Need an accredited Test Lab?  Here’s the Link to the Accredited Companies.  Once you’ve determined that you’re interested in certifying to a specific management system or testing lab specification, you’re going to need standards in order to support your process.  Turn to Document Center Inc. for the compliance documents you’ll need.  You’ll find us on the web at www.document-center.com.  We’re your Standards Experts!

ASTM E340 2015 is here!

ASTM E340, “Standard Practice for Macroetching Metals and Alloys,” has just been released.  The new 2015 Edition replaces the previous 2013 Edition, which is now obsolete.  You can purchase the new update in paper format, for pdf download or as part of Document Center’s Standard Online multi-user subscription service.  It is an 11-page document.

The new 2015 Edition changes the document from a Standard Test Method to a Standard Practice.  What’s the difference between an ASTM Test Method standard and an ASTM Standard Practice?  A test method standard leads to a test result, while a standard practice does not.  This change is reflective of the fact that the document is primarily a list of various metals and alloys along with the proper “macroetchants” and procedures to use for this purpose.

You’ll be using this standard to determine what solutions you’ll use for macroetching various metals.  Tables in the publication also include the correct procedure for each along with comments.  However, there is no definition of test results in the publication.  You’ll have your own parameters in mind when you initiate any testing.

Why use ASTM E340 and macroetching?  The process is used extensively in quality control to reveal the macrostructure of various metals and alloys.  This may reveal such things as cracks, internal faults, and surface defects.  So you’ll find it used in machine shops, forges and foundries.

What are the other changes in this new 2015 Edition of the ASTM E340?  The committee has not provided any guidance to the changes in this new edition.  This means that you’ll need to purchase the redline copy for assistance in identifying the changes in this new edition for your GAP analysis.  A redline copy from ASTM provides you with both a clean copy of the new edition and a copy of the previous edition with the changes clearly marked throughout the document.  The additional cost is insignificant compared with the time savings you’ll get when you use this tool.

Where should you purchase your copy of the ASTM E340?  Since it’s a copyright publication, you’ll need to buy your update from an authorized distributor of the ASTM standards collections.  Document Center Inc. provides you with easy ordering at our webstore, www.document-center.com.  Here is a link directly to the order page for ASTM E340.  Want more help or information on our multi-user subscription service, Standards Online?  Just contact our staff via phone (650-591-7600), fax (650-591-7617) or email (info@document-center.com).  We’ve been selling standards since 1982.  Make us your Standards Experts!

New ISO 21504 for PPM Project Portfolio Management

ISO 21504, “Project, programme and portfolio management – Guidance on portfolio management,” has just been released.  This new 1st Edition provides you with a standardized approach to managing what’s called “portfolios.”  This is a centralized management technique for the processes, methods, and technologies of project management.  It is a high-level view of the project-based activities within an organization and allotment of resources to handle those tasks.

Portfolio management is a relatively new concept, developed in the early 2000’s as a way to identify smiliarities between a wide range of projects, allowing for identification of traits, prioritizing, and so on.  It’s a top down approach to better manage a wide range of projects and similar activities within an organization.  As a management tool, it’s designed to help identify redundancies, risks, and opportunities.  However, it should not be confused with project management, since it is the management of a number of projects rather than of the project itself.

What will you gain by purchasing the ISO 21504?  The standard is designed to help you deliver organization value.  It does this by providing guidance in the following areas:

  • The principles of portfolio management
  • The prerequisites for portfolio management
  • Managing portfolios
  • Governance of portfolios (Informational Annex A)

Who should be using ISO 21504?  The standard has been written for executives and senior managers, for decision makers involved in this type of work, for the teams and individuals implementing and managing portfolios, and project and program managers and other stakeholders.

If you’ve determined that portfolio management can help you resolve corporate issues and mitigate risks by identifying the fastest and most fiscally responsible way to organize the various projects within your company, then the ISO 21504 is for you.  It provides you with a series of actionable items to organize and evaluate your portfolio structure.  And it provides you with the steps to assure your portfolio management structure is providing your organization with real value.

How will you get your copy of the ISO 21504?  You’ll use an authorized distributor like Document Center Inc.  Order at our webstore www.document-center.com.  Here is a direct link for the order page for ISO 21504.  It is available in paper format or for pdf download.  Want to include it in your Standards Online multi-user service?  Check in with our staff by phone (650-591-7600), fax (650-591-7617) or email (info@document-center.com).  We’re your Standards Experts!

CISPR 11 News

CISPR 11, “Industrial, scientific and medical equipment – Radio-frequency disturbance characteristics – Limits and methods of measurement,” has been updated.  The new Edition 6.0 is available in paper format, for pdf download or as a redline edition from Document Center Inc.  This new 2015 update replaces both the Edition 5.0 from 2009 and it’s Amendment 1 from 2010.  It is a technical revision.

Your CISPR 11 is the go-to document for emission limits for RF disturbances in the frequency range of 9 kHz to 400 GHz for what’s termed ISM equipment (Industrial, Scientific and Medical.)  This type of equipment is designed to generate and/or use locally radio-frequency energy.  IEC notes that this equipment can include RF lighting equipment and UV irradiators, however induction cooking appliances are covered in CIRPR 14-1.

What’s new in CISPR 11 2015?  Here’s what IEC says:

“It introduces and permits type testing on components of power electronic equipment, systems and installations. Its emission limits apply now to low voltage (LV) a.c. and d.c. power ports, irrespective of the direction of power transmission. Several limits were adapted to the practical test conditions found at test sites. They are also applicable now to power electronic ISM RF equipment used for wireless power transfer (WPT), for instant power supply and charging purposes. The limits in the range 1 GHz to 18 GHz apply now to CW-type disturbances and to fluctuating disturbances in a similar, uniform and technology-neutral way. For these measurements, two alternative methods of measurement are available, the traditional log-AV method and the new APD method. It has the status of a Product Family EMC standard in accordance with IEC Guide 107, Electromagnetic compatibility – Guide to the drafting of electromagnetic compatibility publications (2014).”

For many of our customers, just knowing the basics of what types of changes are in a document is not enough.  With the stringent requirements of GAP analysis these days, having a redline edition makes the line-by-line analysis of a new update much more exacting.  This is why IEC is making a redline edition available for CIRPS 11.  This copy has all the changes from the previous edition to the new one marked clearly.  However, you do want to know that this redline edition is not an official edition of the document.  It is being providing for your information only.  You still need the official Edition 6.0 copy in order to be compliant.

If you need the new CISPR 11 2015 Edition or want a copy of the redline version, just use the Document Center webstore to order at www.document-center.com.  Here’s the direct link to the CISPR 11 Order Page.  Need help?  Contact our staff to get more information.  You can reach them by phone (650-591-7600), fax (650-591-7617) or email (info@document-center.com).  We’ve been selling standards since 1982.  Make us your Standards Experts!

New Revision for IEC 61340-5-3 – ESD protection

IEC 61340-5-3, “Electrostatics – Part 5-3: Protection of electronic devices from electrostatic phenomena – Properties and requirements classification for packaging intended for electrostatic discharge sensitive devices,” has just been revised.  The new Edition 2.0 is available from Document Center Inc. now.  It updates the Edition 1.0 from 2010 which has become obsolete.

The standard defines the ESD protective packaging properties needed for electrostatic discharge sensitive devices (ESDS) during those products’ life-cycles.  The test methods you’ll need to use for this are referenced in the standard and performance limits are also provided.

Of course, if you use the IEC 61340-5-3, you’ll want to know what the changes are in this new edition.  First of all, the reference to ANSI/ESD STM11.13 (“Two Point Resistance Measurement”) have been removed and replaced by references to IEC 61340-4-10 (“Electrostatics – Part 4-10: Standard test methods for specific applications – Two-point resistance measurement”).  This IEC publication was taken directly from the 2004 Edition of the ANSI/ESD document.

You’ll recognize the ANSI/ESD standard as a publication from the EOS/ESD Association here in the U.S.  If you use the ANSI/ESD STM11.13, you’ll want to know that there is a new 2015 Edition available.  Since the 2015 Edition replaces the 2004 Edition adopted by the IEC publication, we may see an update of the IEC 61340-4-10 document as well.

Secondly, the Edition 2.0 of the IEC 61340-5-3 has additional notes for Table 1 and the addition of a new Table 3.  This new Table 3 is related to the ESD classification symbol and the primary function code.  It’s a 3 column table.  The first colum is the primary function code itself, the second column defines the primary function the code references, and the 3rd column is the ESD classification symbol.  It’s a useful addition to this publication.

Now you’ll need to get your copy of the updated IEC 61340-5-3.  Turn to Document Center Inc., an authorized dealer of the IEC standards.  Use our webstore www.document-center.com to search for and order a wide range of standards.  Or go directly to the order page for IEC 61340-5-3 now.

Need more assistance?  Contact our staff and work directly with a standards expert.  You can reach them by phone (650-591-7600), fax (650-591-7617) or email (info@document-center.com).  We’ve been selling standards since 1982 and have the knowledge to help you with all your standards questions and requirements.  Make us your Standards Experts!

What’s the difference between ISO 10012 and ANSI Z540.3?

“What’s the difference between ISO 10012 and ANSI Z540.3?”  This is a question that gets raised when folks are trying to determine which calibration standard is best for them.  And it’s also generated by those of you trying to decide what standard is your best replacement for the old MIL-STD-45662.  Let’s take a look at each of these important calibration standards to see how they’re similar and different from each other.

First of all, let’s review the ISO 10012, “Measurement Management Systems – Requirements for Measurement Processes and Measuring Equipment.”  This standard provides “generic requirements and … guidance for the management of measurement processes and metrological confirmation of measuring equipment…”  You’ll use it to show that your equipment complies with specific tolerances (metrological requirements) and that your management system supports your calibration system.

The ISO 10012 covers the topics of management responsibility, resource management, metrological confirmation and realization of measurement processes and the analysis and improvement of your measurement management system.  There’s also an informative Annex A that gives you an overview of the metrological confirmation process.  The 26-page document also includes specific guidance throughout the body of the text, boxed information that clarifies various procedures.

The ANSI Z540.3, “Requirements for the Calibration of Measuring and Test Equipment,” is much more focused on calibration itself rather than the management of the same.  So your sections (apart from the usual scope, referenced documents and definitions that both standards have) include information on:

  • General Requirements
  • Calibration system implementation
  • Calibration system assessment and improvement

Detailed information is provided on such topics as records and data control, competence and training, calibration equipment and personnel, and so on.  And as a final note on the document, the ANSI Z540.3 is the successor document to the old ANSI Z540.1.

Now we’ve taken a look at both the ISO 10012 and ANSI Z540.3.  To wrap the discussion up, the ISO 10012 standard is more of a management overview of one’s calibration system whereas the ANSI Z540.3 is a focused document with specific requirements for the control of accuracy for calibrating measuring and test equipment.  Either or both will make suitable replacements for the MIL-STD-45662, the old Mil Standard on calibration.  You’ll want to choose between them based on your specific needs.

And where can you get your copies of either of these standards?  From Document Center Inc., of course!  We’re an authorized standards distributor based in Silicon Valley with over 30 years of  experience in working with this type of conformance information.  Use our online webstore, www.document-center.com, to order your standards publications when you need them.  And here’s a link to the order page for ISO 10012 and the order page for ANSI Z540.3.  Or contact our staff by phone (650-591-7600), fax (650-591-7617) or email (info@document-center.com) when you need assistance.  We’re your Standards Experts!

 

ISO/IEC TR 27023 – GAP analysis help for ISO/IEC 23001 and ISO/IEC 23002

ISO/IEC TR 27023, “Information technology – Security techniques – Mapping the revised editions of ISO/IEC 27001 and ISO/IEC 27002,” has just been released.  It contains a group of three tables that will help you “map” where the requirements of the older edition of each has moved in the newer one.  While it’s not a complete redline for the two standards, it does provide you with tracking where specific requirements or controls are now located.

The three tables in the 26-page ISO/IEC TR 27023 cover the following documents, editions and directions:

  • ISO/IEC 27001 2nd Edition (2013) to ISO/IEC 27001 1st Edition (2005)
  • ISO/IEC 27002 2nd Edition (2005) to ISO/IEC 27002 3rd Edition (2013)
  • ISO/IEC 27002 3rd Edition (2013) to ISO/IEC 27002 2nd Edition (2005)

Why is the ISO/IEC TR 27023 helpful?  It provides a factual correspondence between the old and new revisions of the ISO/IEC 27001 and ISO/IEC 27002 respectivly.  This will be the starting point for your analysis of the changes that have been instigated by the newer editions of each standard.  Just remember:  The Technical Report does not provide any further information on content changes or the rationale or impact of those changes.  You’ll have to do your evaluation of the effect the new requirements will have on your product or service independent of this report.

The committee has made the following note:  “For ISO/IEC 27002, the comparison was based on control objectives, controls, and implementation guidance.”

Who should use the ISO/IEC TR 27023?  Folks who have implemented the 2005 Editions of one or both of the “target” standards will find this useful when migrating to the 2013 Edition requirements.

What other information is in the ISO/IEC TR 27023?  Other than the usual introductory material, the scope, referenced documents and definition sections, the technical report is solely comprised of the three comparison tables.

How can I get a copy of the ISO/IEC TR 27023?  Since all ISO/IEC publications are covered by the laws of copyright, you’ll want to purchase your copies from an authorized distributor like Document Center Inc.  You can order your standards online at the Document Center Inc. webstore, www.document-center.com.  Here is a direct link to the order page for ISO/IEC TR 27023.  It’s available in paper format, for pdf download, or as part of our Standards Online multi-user subscription service.  Want to know more?  Contact our staff by phone (650-591-7600), fax (650-591-7617) or email (info@document-center.com).  We’ve been providing standards to folks like you since 1982.  Make us your Standards Experts!