What is ISO/IEC 13888-1 about?
ISO/IEC 13888 discusses information security. ISO/IEC 13888-1 is the first part of a series of documents that serves as a general model for subsequent parts specifying non-repudiation mechanisms using cryptographic techniques.
ISO/IEC 13888-1 provides non-repudiation mechanisms for the following phases of non-repudiation:
- Evidence generation
- Evidence transfers storage and retrieval and
- Evidence verification
Note: Dispute arbitration is outside the scope of the ISO/IEC 13888 series.
Who is ISO/IEC 13888-1 for?
ISO/IEC 13888-1 on information security is applicable to:
- Information technology companies
- IT risk and IT security managers
- Cyber security cells
- Financial companies
- Computer hardware companies
- Software companies
Why should you use ISO/IEC 13888-1?
Non-repudiation services will help you prove the action or event that has taken place between the parties. This data and evidence can be stored or communicated in a non-repudiation exchange between the parties involved.
ISO/IEC 13888-1 will help you in understanding the provisions and verifications of the evidence of information. These evidence generation mechanisms involve the generation of secure envelopes and digital signatures based on symmetric and asymmetric cryptographic techniques.
ISO/IEC 13888-1 will help you use the symmetric cryptographic techniques by involving an online trusted third party that helps generate and verify SENVs.
Buying ISO/IEC 13888-1 will help you to generate, collect, maintain and verify the evidence that results in solving the disputes about the occurrence or non-occurrence of the event or action. The non-repudiation mechanisms mentioned in ISO/IEC 13888-1 will help you in providing the evidence structure based on cryptographic check values generated using symmetric or asymmetric cryptographic techniques.
What’s changed since the last update?
BS ISO/IEC 13888-1:2020 supersedes BS ISO/IEC 13888-1:2009. BS ISO/IEC 13888-1:2020 includes some technical changes with respect to BS ISO/IEC 13888-1:2009. These include:
- Clause 3 has been updated
- Terminology issues have been fixed and
- A new requirement has been introduced when using hash functions
