BS ISO IEC Standards Single-File Series Overview · Batch 1 — A Compilation of 150 International Standards (ISO and IEC) and Their Technical Points

The BS ISO IEC series comprises British National Standards published by the British Standards Institution (BSI) as the UK implementation of International Standards developed jointly by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC) (ISO/IEC JTC1 information technology area). This batch (Batch 1) consists of 150 single-file standards drawn from the BS ISO IEC series, spanning identification cards and machine-readable travel documents, programming languages (Ada, C, C++, ECMAScript), information security techniques (cryptographic modules, digital signatures, random bit generation, biometrics), automatic identification and data capture (barcode symbologies, RFID, data identifiers), cloud computing (overview and vocabulary, reference architecture, data management interface), software and systems quality (SQuaRE series, CIF usability, product line engineering), and information security management systems (ISMS 27000 series).

Most of these standards adopt ISO and IEC International Standards identically and cover programming language specifications, security techniques, quality models, symbology specifications and management systems. The article lists the full standard set in numerical order and expands on five representative standards, helping readers understand the structure, technical requirements and application points of BS ISO IEC single-file standards.

1. Series Overview 📌

This batch is arranged by standard number from ISO/IEC 01539 to ISO/IEC 27013 and covers identification cards (physical characteristics, machine-readable travel documents, IC card authentication protocols), programming languages (Ada, C, C++, ECMAScript), information security techniques (cryptographic module security requirements and testing, digital signatures, random bit generation, information security management systems), automatic identification and data capture (QR Code, PDF417, Aztec, DataBar barcode symbology specifications, RFID item management), cloud computing (overview and vocabulary, reference architecture, cloud data management interface CDMI, cloud infrastructure management interface CIMI), and software and systems quality (SQuaRE series quality models and measurement, CIF usability, product line engineering).

By standard type, numerous specifications and test standards are present together with terminology, quality model and management system standards. The ISO/IEC 27000 series forms a complete information security management system family from terminology, requirements to controls, auditing and sector-specific applications; SQuaRE (the ISO/IEC 25000 series) forms the evaluation framework for software and system quality requirements.

2. Standard List and Technical Points 📋

3. Key Technical Requirements 🔧

For information security techniques, ISO/IEC 19790 specifies security requirements for cryptographic modules, ISO/IEC 24759 specifies test requirements for cryptographic modules, ISO/IEC 18031 specifies random bit generation, ISO/IEC 14888/9796 specify digital signatures, and ISO/IEC 15408 specifies the IT security evaluation criteria (CC), forming the cryptographic and security evaluation system.

For information security management systems, the ISO/IEC 27000-27013 series specifies ISMS terminology, requirements, controls, monitoring and measurement, risk, auditing and certification, and sector-specific applications, forming the international basis for organisational ISMS certification.

For software and systems quality, the ISO/IEC 25000 series (SQuaRE) specifies quality models (quality in use, product quality, data quality), quality measurement, the evaluation process and the CIF usability format, forming the software quality evaluation framework.

For automatic identification and data capture, ISO/IEC 15420/15438/15415/15426-2/18004/24724/24728/24778 specify EAN/UPC, PDF417, QR, DataBar, MicroPDF417 and Aztec barcode symbology specifications and print quality testing, and ISO/IEC 15962/15963/24753 specify the RFID item management data protocol and unique identification.

4. Technical Interpretation of Representative Standards 🔍

BS ISO IEC 27001:2013 — Information Security Management Systems Requirements

Scope: specifies requirements for establishing, implementing, operating, monitoring, reviewing, maintaining and improving information security management systems.

Points: specifies risk-based ISMS requirements (organisational context, leadership, planning, support, operation, performance evaluation and improvement), which together with the ISO/IEC 27002 code of practice form the basis for global organisational ISMS certification.

BS ISO IEC 25010:2011 — System and Software Quality Models

Scope: specifies system and software product quality models and quality-in-use models.

Points: defines product quality characteristics (functional suitability, performance efficiency, compatibility, usability, reliability, security, maintainability, portability) and quality-in-use characteristics, forming the top-level model of SQuaRE quality evaluation, widely used in software testing and quality evaluation.

BS ISO IEC 20922:2016 — MQTT v3.1.1

Scope: specifies the Message Queuing Telemetry Transport (MQTT) v3.1.1 protocol.

Points: specifies the publish/subscribe message model, client-server interaction, three quality of service levels, last-will messages and session management; it is the mainstream lightweight messaging protocol for IoT device communication.

BS ISO IEC 17788:2014 — Cloud Computing Overview and Vocabulary

Scope: provides the conceptual framework and vocabulary for cloud computing.

Points: defines cloud computing roles, activities, service capabilities (IaaS, PaaS, SaaS) and deployment models, providing a common terminology for cloud service procurement and interoperability; together with ISO/IEC 17789 reference architecture it forms the cloud computing standard basis.

BS ISO IEC 18004:2015 — QR Code Bar Code Symbology Specification

Scope: specifies the encoding and symbol characteristics of the QR Code symbology.

Points: specifies the QR Code symbol structure, modes (numeric, alphanumeric, byte, kanji), error correction levels and version capacities, forming the basis for global two-dimensional code information encoding.

5. Engineering Practice and Applications 🛠️

Information security departments should establish and certify ISMS in accordance with ISO/IEC 27001/27002/27005/27006 and evaluate cryptographic modules in accordance with ISO/IEC 19790/24759.

Software and systems enterprises should implement quality evaluation in accordance with the ISO/IEC 25000 series and product line engineering in accordance with the ISO/IEC 26550 series.

Logistics and retail enterprises should implement barcodes in accordance with ISO/IEC 15420/15438/18004/24724/24778 and RFID item management in accordance with ISO/IEC 15962/15963.

Cloud service providers should provide cloud services and interfaces in accordance with ISO/IEC 17788/17789/17826/19831.

6. Frequently Asked Questions ❓