Physical Address
304 North Cardinal St.
Dorchester Center, MA 02124
Physical Address
304 North Cardinal St.
Dorchester Center, MA 02124
The BS ISO IEC series comprises British National Standards published by the British Standards Institution (BSI) as the UK implementation of International Standards developed jointly by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC) (ISO/IEC JTC1 information technology area). This batch (Batch 1) consists of 150 single-file standards drawn from the BS ISO IEC series, spanning identification cards and machine-readable travel documents, programming languages (Ada, C, C++, ECMAScript), information security techniques (cryptographic modules, digital signatures, random bit generation, biometrics), automatic identification and data capture (barcode symbologies, RFID, data identifiers), cloud computing (overview and vocabulary, reference architecture, data management interface), software and systems quality (SQuaRE series, CIF usability, product line engineering), and information security management systems (ISMS 27000 series).
Most of these standards adopt ISO and IEC International Standards identically and cover programming language specifications, security techniques, quality models, symbology specifications and management systems. The article lists the full standard set in numerical order and expands on five representative standards, helping readers understand the structure, technical requirements and application points of BS ISO IEC single-file standards.
This batch is arranged by standard number from ISO/IEC 01539 to ISO/IEC 27013 and covers identification cards (physical characteristics, machine-readable travel documents, IC card authentication protocols), programming languages (Ada, C, C++, ECMAScript), information security techniques (cryptographic module security requirements and testing, digital signatures, random bit generation, information security management systems), automatic identification and data capture (QR Code, PDF417, Aztec, DataBar barcode symbology specifications, RFID item management), cloud computing (overview and vocabulary, reference architecture, cloud data management interface CDMI, cloud infrastructure management interface CIMI), and software and systems quality (SQuaRE series quality models and measurement, CIF usability, product line engineering).
By standard type, numerous specifications and test standards are present together with terminology, quality model and management system standards. The ISO/IEC 27000 series forms a complete information security management system family from terminology, requirements to controls, auditing and sector-specific applications; SQuaRE (the ISO/IEC 25000 series) forms the evaluation framework for software and system quality requirements.
| Standard | Title |
|---|---|
| BS ISO IEC 01539-1:2010 | Scanned version standard (refer to the official published version) |
| BS ISO IEC 07501-3:2005 | Identification cards — Machine readable travel documents — Part 3: Machine readable official travel documents |
| BS ISO IEC 07810:2003 | Identification cards — Physical characteristics |
| BS ISO IEC 08484:2014 | Information technology — Magnetic stripes on savingsbooks |
| BS ISO IEC 08652:2012 | Information technology — Programming languages — Ada |
| BS ISO IEC 08822:1994 | Scanned version standard (refer to the official published version) |
| BS ISO IEC 08825-7:2014 | Information technology — ASN.1 encoding rules — Part 7: Specification of Octet Encoding Rules (OER) |
| BS ISO IEC 09796-2:2010 | Information technology — Security techniques — Digital signature schemes giving message recovery — Part 2: Integer factorization based mechanisms |
| BS ISO IEC 09899:2011 | Information technology — Programming languages — C |
| BS ISO IEC 10536-1:2000 | Scanned version standard (refer to the official published version) |
| BS ISO IEC 10561:1991 | Scanned version standard (refer to the official published version) |
| BS ISO IEC 10967-1:2012 | Information technology — Language independent arithmetic — Part 1: Integer and floating point arithmetic |
| BS ISO IEC 11160-2:2013 | Information technology — Office equipment — Minimum information to be included in specification sheets — Printers — Part 2: Class 3 and Class 4 printers |
| BS ISO IEC 12905:2011 | Integrated circuit cards — Enhanced terminal accessibility using cardholder preference interface |
| BS ISO IEC 13066-1:2011 | Information technology — Interoperability with assistive technology (AT) — Part 1: Requirements and recommendations for interoperability |
| BS ISO IEC 13239:1997 | Information technology — Telecommunications and information exchange between systems — High-level data link control procedures |
| BS ISO IEC 13963:1995 | Information technology — Data interchange on 90 mm optical disk cartridges |
| BS ISO IEC 14651:2016 | Information technology — International string ordering and comparison — Method for comparing character strings and description of the common template tailorable ordering |
| BS ISO IEC 14662:2010 | Information technology — Open-edi reference model |
| BS ISO IEC 14882:2014 | Information technology — Programming languages — C++ |
| BS ISO IEC 14888-3:2016 | Information technology — Security techniques — Digital signatures with appendix — Part 3: Discrete logarithm based mechanisms |
| BS ISO IEC 14957:2010 | Information technology — Representation of data element values — Notation of the format |
| BS ISO IEC 15408-1:2009 | Information technology — Security techniques — Evaluation criteria for IT security (CC) — Part 1: Introduction and general model |
| BS ISO IEC 15414:2015 | Information technology — Open distributed processing — Reference model — Enterprise language |
| BS ISO IEC 15415:2011 | Information technology — Automatic identification and data capture techniques — Bar code symbol print quality test specification — Two-dimensional symbols |
| BS ISO IEC 15418:2016 | Information technology — Automatic identification and data capture techniques — GS1 Application Identifiers and ASC MH10 Data Identifiers and maintenance |
| BS ISO IEC 15420:2009 | Information technology — Automatic identification and data capture techniques — EAN/UPC bar code symbology specification |
| BS ISO IEC 15421:2010 | Information technology — Automatic identification and data capture techniques — Bar code master test specifications |
| BS ISO IEC 15424:2008 | Information technology — Automatic identification and data capture techniques — Data Carrier Identifiers (including Symbology Identifiers) |
| BS ISO IEC 15426-2:2015 | Information technology — Automatic identification and data capture techniques — Bar code verifier conformance specification — Part 2: Two-dimensional symbols |
| BS ISO IEC 15438:2015 | Information technology — Automatic identification and data capture techniques — PDF417 bar code symbology specification |
| BS ISO IEC 15444-12:2015 | Information technology — JPEG 2000 image coding system — Part 12: ISO base media file format |
| BS ISO IEC 15938-13:2015 | Information technology — Multimedia content description interface — Part 13: Compact descriptors for visual search |
| BS ISO IEC 15939:2007 | Systems and software engineering — Measurement process |
| BS ISO IEC 15940:2013 | Scanned version standard (refer to the official published version) |
| BS ISO IEC 15962:2013 | Information technology — Radio frequency identification (RFID) for item management — Data protocol: data encoding rules and logical memory functions |
| BS ISO IEC 15963:2009 | Information technology — Radio frequency identification for item management — Unique identification for RF tags |
| BS ISO IEC 16023:2000 | Scanned version standard (refer to the official published version) |
| BS ISO IEC 16262:2011 | Information technology — Programming languages, their environments and system software interfaces — ECMAScript language specification |
| BS ISO IEC 16326:2009 | Software engineering — Life cycle process — Project management |
| BS ISO IEC 16350:2015 | Information technology — Systems and software engineering — Application management |
| BS ISO IEC 16480:2015 | Information technology — Automatic identification and data capture techniques — Reading and display of ORM by mobile devices |
| BS ISO IEC 16680:2012 | Scanned version standard (refer to the official published version) |
| BS ISO IEC 17549-2:2015 | Information technology — User interface guidelines on menu navigation — Part 2: Navigation with 4-direction devices |
| BS ISO IEC 17629:2014 | Information technology — Office equipment — Method for measuring first print out time for digital printing devices |
| BS ISO IEC 17788:2014 | Information technology — Cloud computing — Overview and vocabulary |
| BS ISO IEC 17789:2014 | Information technology — Cloud computing — Reference architecture |
| BS ISO IEC 17799:2000 | Scanned version standard (refer to the official published version) |
| BS ISO IEC 17821:2015 | Information technology — Specification of low power wireless mesh network over channel-hopped TDMA links |
| BS ISO IEC 17823:2015 | Colour terminology for office colour equipment |
| BS ISO IEC 17825:2016 | Information technology — Security techniques — Testing methods for the mitigation of non-invasive attack classes against cryptographic modules |
| BS ISO IEC 17826:2016 | Information technology — Cloud Data Management Interface (CDMI) |
| BS ISO IEC 17960:2015 | Information technology — Programming languages, their environments and system software interfaces — Code signing for source code |
| BS ISO IEC 17963:2013 | Web Services for Management (WS-Management) Specification |
| BS ISO IEC 17991:2015 | Information technology — Office equipment — Method for Measuring Scanning Productivity of Digital Multifunctional Devices |
| BS ISO IEC 17998:2012 | Scanned version standard (refer to the official published version) |
| BS ISO IEC 18004:2015 | Information technology — Automatic identification and data capture techniques — QR Code bar code symbology specification |
| BS ISO IEC 18031:2011 | Information technology — Security techniques — Random bit generation |
| BS ISO IEC 18180:2013 | Information technology — Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.2 |
| BS ISO IEC 18305:2016 | Information technology — Real time locating systems — Test and evaluation of localization and tracking systems |
| BS ISO IEC 18367:2016 | Information technology — Security techniques — Cryptographic algorithms and security mechanisms conformance testing |
| BS ISO IEC 18450:2013 | Information technology — Telecommunications and information exchange between systems — Web Services Description Language (WSDL) for CSTA Phase III |
| BS ISO IEC 18584:2015 | Information technology — Identification cards — Conformance test requirements for on-card biometric comparison applications |
| BS ISO IEC 19099:2014 | Information technology — Virtualization Management Specification |
| BS ISO IEC 19395:2015 | Information technology — Sustainability for and by information technology — Smart data centre resource monitoring and control |
| BS ISO IEC 19505-1:2012 | Information technology — Object Management Group Unified Modeling Language (OMG UML) — Part 1: Infrastructure |
| BS ISO IEC 19510:2013 | Information technology — Object Management Group Business Process Model and Notation |
| BS ISO IEC 19592-1:2016 | Information technology — Security techniques — Secret sharing — Part 1: General |
| BS ISO IEC 19637:2016 | Information technology — Sensor network testing framework |
| BS ISO IEC 19678:2015 | Information Technology — BIOS Protection Guidelines |
| BS ISO IEC 19752:2017 | Information technology — Office equipment — Method for the determination of toner cartridge yield for monochromatic electrophotographic printers and multi-function devices that contain printer components |
| BS ISO IEC 19756:2011 | Information technology — Topic Maps — Constraint Language (TMCL) |
| BS ISO IEC 19761:2011 | Software engineering — COSMIC: A functional size measurement method |
| BS ISO IEC 19772:2009 | Information technology — Security techniques — Authenticated encryption |
| BS ISO IEC 19773:2011 | Information technology — Metadata Registries (MDR) modules |
| BS ISO IEC 19780-1:2015 | Information technology — Learning, education and training — Collaborative technology — Collaborative learning communication — Part 1: Text-based communication |
| BS ISO IEC 19790:2012 | Information technology — Security techniques — Security requirements for cryptographic modules |
| BS ISO IEC 19792:2009 | Information technology — Security techniques — Security evaluation of biometrics |
| BS ISO IEC 19796-3:2009 | Information technology — Learning, education and training — Quality management, assurance and metrics |
| BS ISO IEC 19798:2017 | Information technology — Office equipment — Method for the determination of toner cartridge yield for colour printers and multi-function devices that contain printer components |
| BS ISO IEC 19831:2015 | Cloud Infrastructure Management Interface (CIMI) Model and RESTful HTTP-based Protocol — An Interface for Managing Cloud Infrastructure |
| BS ISO IEC 19987:2015 | Information technology — EPC Information services — Specification |
| BS ISO IEC 19988:2015 | Information technology — GS1 Core business vocabulary (CBV) |
| BS ISO IEC 20005:2013 | Information technology — Sensor networks — Services and interfaces supporting collaborative information processing in intelligent sensor networks |
| BS ISO IEC 20060:2010 | Scanned version standard (refer to the official published version) |
| BS ISO IEC 20243:2015 | Information Technology — Open Trusted Technology Provider Standard (O-TTPS) — Mitigating maliciously tainted and counterfeit products |
| BS ISO IEC 20246:2017 | Software and systems engineering — Work product reviews |
| BS ISO IEC 20648:2016 | Information technology — TLS specification for storage systems |
| BS ISO IEC 20919:2016 | Information technology — Linear Tape File System (LTFS) Format Specification |
| BS ISO IEC 20922:2016 | Information technology — Message Queuing Telemetry Transport (MQTT) v3.1.1 |
| BS ISO IEC 20926:2009 | Software and systems engineering — Software measurement — IFPUG functional size measurement |
| BS ISO IEC 20933:2016 | Information technology — Distributed Application Platforms and Services (DAPS) — Access Systems |
| BS ISO IEC 21117:2012 | Information technology — Office equipment — Copying machines and multi-function devices — Information to be included in specification sheets and related test methods |
| BS ISO IEC 21118:2012 | Information technology — Office equipment — Projectors — Information to be included in specification sheets |
| BS ISO IEC 21320-1:2015 | Information technology — Document Container File — Part 1: Core |
| BS ISO IEC 23000-15:2016 | Information technology — Multimedia application format (MPEG-A) — Part 15: Multimedia preservation application format |
| BS ISO IEC 23009-1:2014 | Information technology — Dynamic adaptive streaming over HTTP (DASH) — Part 1: Media presentation description and segment formats |
| BS ISO IEC 23026:2006 | Software Engineering — Recommended Practice for the Internet — Web Site Engineering, Web Site Management, and Web Site Life Cycle |
| BS ISO IEC 24709-3:2011 | Scanned version standard (refer to the official published version) |
| BS ISO IEC 24711:2015 | Method for the determination of ink cartridge yield for colour inkjet printers and multi-function devices that contain printer components |
| BS ISO IEC 24723:2010 | Scanned version standard (refer to the official published version) |
| BS ISO IEC 24724:2011 | Information technology — Automatic identification and data capture techniques — GS1 DataBar bar code symbology specification |
| BS ISO IEC 24728:2006 | Information technology — Automatic identification and data capture techniques — MicroPDF417 bar code symbology |
| BS ISO IEC 24734:2014 | Information technology — Office equipment — Method for measuring digital printing productivity |
| BS ISO IEC 24735:2012 | Scanned version standard (refer to the official published version) |
| BS ISO IEC 24744:2014 | Software engineering — Metamodel for development methodologies |
| BS ISO IEC 24745:2011 | Scanned version standard (refer to the official published version) |
| BS ISO IEC 24753:2011 | Information technology — Radio frequency identification (RFID) for item management — Application protocol: encoding and processing rules for sensors and batteries |
| BS ISO IEC 24754-1:2008 | Information technology — Document description and processing languages — Part 1: Minimum specification |
| BS ISO IEC 24759:2014 | Information technology — Security techniques — Test requirements for cryptographic modules |
| BS ISO IEC 24760-1:2011 | Information technology — Security techniques — A framework for identity management — Part 1: Terminology and concepts |
| BS ISO IEC 24761:2009 | Information technology — Security techniques — Authentication context for biometrics |
| BS ISO IEC 24778:2008 | Information technology — Automatic identification and data capture techniques — Aztec Code bar code symbology specification |
| BS ISO IEC 24787:2010 | Information technology — Identification cards — On-card biometric comparison |
| BS ISO IEC 24790:2017 | Information technology — Office equipment — Measurement of image quality attributes for hardcopy output — Monochrome text and graphic images |
| BS ISO IEC 25000:2014 | Systems and software engineering — Systems and software Quality Requirements and Evaluation (SQuaRE) — Guide to SQuaRE |
| BS ISO IEC 25001:2014 | Systems and software engineering — Systems and software Quality Requirements and Evaluation (SQuaRE) — Planning and management |
| BS ISO IEC 25010:2011 | Systems and software engineering — Systems and software Quality Requirements and Evaluation (SQuaRE) — System and software quality models |
| BS ISO IEC 25021:2012 | Systems and software engineering — Systems and software Quality Requirements and Evaluation (SQuaRE) — Quality measure elements |
| BS ISO IEC 25022:2016 | Systems and software engineering — Systems and software quality requirements and evaluation (SQuaRE) — Measurement of quality in use |
| BS ISO IEC 25023:2016 | Systems and software engineering — Systems and software Quality Requirements and Evaluation (SQuaRE) — Measurement of system and software product quality |
| BS ISO IEC 25024:2015 | Systems and software engineering — Systems and software Quality Requirements and Evaluation (SQuaRE) — Measurement of data quality |
| BS ISO IEC 25040:2011 | Systems and software engineering — Systems and software Quality Requirements and Evaluation (SQuaRE) — Evaluation process |
| BS ISO IEC 25041:2012 | Systems and software engineering — Systems and software Quality Requirements and Evaluation (SQuaRE) — Evaluation guide for developers, acquirers and independent evaluators |
| BS ISO IEC 25045:2010 | Scanned version standard (refer to the official published version) |
| BS ISO IEC 25051:2014 | Software engineering — Systems and software Quality Requirements and Evaluation (SQuaRE) — Requirements for quality of Ready to Use Software Product (RUSP) and instructions for testing |
| BS ISO IEC 25063:2014 | Systems and software engineering — Systems and software product Quality Requirements and Evaluation (SQuaRE) — Common Industry Format (CIF) for usability: Context of use description |
| BS ISO IEC 25064:2013 | Systems and software engineering — Software product Quality Requirements and Evaluation (SQuaRE) — Common Industry Format (CIF) for usability: User needs report |
| BS ISO IEC 25066:2016 | Systems and software engineering — Systems and software Quality Requirements and Evaluation (SQuaRE) — Common Industry Format (CIF) for Usability — Evaluation Report |
| BS ISO IEC 25185-1:2016 | Identification cards — Integrated circuit card authentication protocols — Part 1: Protocol for Lightweight Authentication of Identity |
| BS ISO IEC 26511:2011 | Systems and software engineering — Requirements for managers of user documentation |
| BS ISO IEC 26512:2011 | Systems and software engineering — Requirements for acquirers and suppliers of user documentation |
| BS ISO IEC 26513:2009 | Systems and software engineering — Requirements for testers and reviewers of user documentation |
| BS ISO IEC 26515:2011 | Systems and software engineering — Developing user documentation in an agile environment |
| BS ISO IEC 26550:2015 | Software and systems engineering — Reference model for product line engineering and management |
| BS ISO IEC 26551:2016 | Software and systems engineering — Tools and methods for product line requirements engineering |
| BS ISO IEC 26555:2015 | Software and systems engineering — Tools and methods for product line technical management |
| BS ISO IEC 26557:2016 | Software and systems engineering — Methods and tools for variability mechanisms in software and systems product line |
| BS ISO IEC 27000:2016 | Information technology — Security techniques — Information security management systems — Overview and vocabulary |
| BS ISO IEC 27001:2013 | Information technology — Security techniques — Information security management systems — Requirements |
| BS ISO IEC 27002:2013 | Information technology — Security techniques — Code of practice for information security controls |
| BS ISO IEC 27003:2017 | Scanned version standard (refer to the official published version) |
| BS ISO IEC 27004:2016 | Information technology — Security techniques — Information security management — Monitoring, measurement, analysis and evaluation |
| BS ISO IEC 27005:2011 | Scanned version standard (refer to the official published version) |
| BS ISO IEC 27006:2015 | Information technology — Security techniques — Requirements for bodies providing audit and certification of information security management systems |
| BS ISO IEC 27007:2011 | Information technology — Security techniques — Guidelines for information security management systems auditing |
| BS ISO IEC 27009:2016 | Information technology — Security techniques — Sector-specific application of ISO/IEC 27001 — Requirements |
| BS ISO IEC 27010:2015 | Information technology — Security techniques — Information security management for inter-sector and inter-organizational communications |
| BS ISO IEC 27011:2016 | Information technology — Security techniques — Code of practice for Information security controls based on ISO/IEC 27002 for telecommunications organizations |
| BS ISO IEC 27013:2015 | Information technology — Security techniques — Guidance on the integrated implementation of ISO/IEC 27001 and ISO/IEC 20000-1 |
For information security techniques, ISO/IEC 19790 specifies security requirements for cryptographic modules, ISO/IEC 24759 specifies test requirements for cryptographic modules, ISO/IEC 18031 specifies random bit generation, ISO/IEC 14888/9796 specify digital signatures, and ISO/IEC 15408 specifies the IT security evaluation criteria (CC), forming the cryptographic and security evaluation system.
For information security management systems, the ISO/IEC 27000-27013 series specifies ISMS terminology, requirements, controls, monitoring and measurement, risk, auditing and certification, and sector-specific applications, forming the international basis for organisational ISMS certification.
For software and systems quality, the ISO/IEC 25000 series (SQuaRE) specifies quality models (quality in use, product quality, data quality), quality measurement, the evaluation process and the CIF usability format, forming the software quality evaluation framework.
For automatic identification and data capture, ISO/IEC 15420/15438/15415/15426-2/18004/24724/24728/24778 specify EAN/UPC, PDF417, QR, DataBar, MicroPDF417 and Aztec barcode symbology specifications and print quality testing, and ISO/IEC 15962/15963/24753 specify the RFID item management data protocol and unique identification.
Scope: specifies requirements for establishing, implementing, operating, monitoring, reviewing, maintaining and improving information security management systems.
Points: specifies risk-based ISMS requirements (organisational context, leadership, planning, support, operation, performance evaluation and improvement), which together with the ISO/IEC 27002 code of practice form the basis for global organisational ISMS certification.
Scope: specifies system and software product quality models and quality-in-use models.
Points: defines product quality characteristics (functional suitability, performance efficiency, compatibility, usability, reliability, security, maintainability, portability) and quality-in-use characteristics, forming the top-level model of SQuaRE quality evaluation, widely used in software testing and quality evaluation.
Scope: specifies the Message Queuing Telemetry Transport (MQTT) v3.1.1 protocol.
Points: specifies the publish/subscribe message model, client-server interaction, three quality of service levels, last-will messages and session management; it is the mainstream lightweight messaging protocol for IoT device communication.
Scope: provides the conceptual framework and vocabulary for cloud computing.
Points: defines cloud computing roles, activities, service capabilities (IaaS, PaaS, SaaS) and deployment models, providing a common terminology for cloud service procurement and interoperability; together with ISO/IEC 17789 reference architecture it forms the cloud computing standard basis.
Scope: specifies the encoding and symbol characteristics of the QR Code symbology.
Points: specifies the QR Code symbol structure, modes (numeric, alphanumeric, byte, kanji), error correction levels and version capacities, forming the basis for global two-dimensional code information encoding.
Information security departments should establish and certify ISMS in accordance with ISO/IEC 27001/27002/27005/27006 and evaluate cryptographic modules in accordance with ISO/IEC 19790/24759.
Software and systems enterprises should implement quality evaluation in accordance with the ISO/IEC 25000 series and product line engineering in accordance with the ISO/IEC 26550 series.
Logistics and retail enterprises should implement barcodes in accordance with ISO/IEC 15420/15438/18004/24724/24778 and RFID item management in accordance with ISO/IEC 15962/15963.
Cloud service providers should provide cloud services and interfaces in accordance with ISO/IEC 17788/17789/17826/19831.