This Extraordinary Gazette notification from the Bureau of Indian Standards (BIS), dated October 22, 2024, announces the establishment and withdrawal of several Indian Standards (IS) related to Information Technology and Cybersecurity.
The notification is issued under Sub-rule (1) of Rule 15 of the Bureau of Indian Standards Rules, 2018.
Key Changes
Four Indian Standards (IS) related to Information Technology and Cybersecurity have been established on October 8, 2024.
These standards cover areas such as supplier security relationships, electronic discovery management, trusted connections between devices and services, and IoT security and privacy.
No Indian Standards are being withdrawn in this notification according to the provided text, although the gazette mentions the possibility of future withdrawals.
Specific IS numbers established include: IS/ISO/IEC 27036-3:2023, IS/ISO/IEC 27050-2:2018, IS/ISO/IEC 27071:2023, and IS/ISO/IEC 27402:2023. Older versions of some standards (e.g., IS/ISO/IEC 27036-3:2013) will remain in effect concurrently until April 8, 2025.
Impact Analysis
Impact on Businesses
The concurrent validity of older and newer standards may create a transitional period requiring careful management.
Impact on Government Agencies
Government agencies may also use these standards in their procurement processes.
Impact on Consumers
Indirectly, this may improve consumer trust and confidence in digital products and services.
Suggested Action Items
Stakeholders should monitor future BIS notifications for updates and potential withdrawals of standards.
Key Entities Referenced
Bureau of Indian Standards (BIS): The issuing authority of the notification, responsible for developing and implementing Indian Standards.
Bureau of Indian Standards Rules, 2018: The legal framework under which the notification is issued.
IS/ISO/IEC 27036-3, IS/ISO/IEC 27050-2, IS/ISO/IEC 27071, IS/ISO/IEC 27402: The specific Indian Standards established or updated by this notification.
Department of Consumer Affairs: The government department under which BIS operates.
रजिस्ट्री स.ं डी.एल.- 33004/99 REGD. No. D. L.-33004/99
सी.जी.-डी.एल.-अ.-24102024-258202
xxxGIDHxxx
CG-DL-E-24102024-258202
xxxGIDExxx
असाधारण
EXTRAORDINARY
भाग III—खण् ड 4
PART III—Section 4
प्राजधकार स ेप्रकाजित
PUBLISHED BY AUTHORITY
स.ं 855] नई दिल्ली, मगं लिार, अक्त बू र 22, 2024/आजिन 30 , 1946
No. 855] NEW DELHI, TUESDAY, OCTOBER 22, 2024/ASVINA 30 1946
भारतीय मानक ब्य रू ो
(उपभोक्त ा मामल ेजिभाग)
अजधसूचना
नई दिल्ली, 15 अक् तूबर, 2024
सिं भ:भ HQ-PUB013/1/2020-PUB-BIS (1061)–– भारतीय मानक ब्यरू ो जनयम, 2018 के जनयम 15 के
उपजनयम (1) के अनुसरण म ें भारतीय मानक ब्यूरो एतिद्वारा अजधसूजचत करता ह ै की जिन भारतीय मानकों के जििरण
इसमें संलग्न अनूसूची के जद्वतीय स्ट्तंभ में दिये गये ह,ैं तीसरे स्ट्तभं में इंजगत जतजि को स्ट्िाजपत हो गये ह|ैं चौिे स्ट्तंभ में दिय े
गय े मानकों के जििरण, यदि कोई हो तो ि े भी साि-साि लाग ू रहगें े िब तक ि े पााँचि ें स्ट्तंभ में इंजगत जतजि को िापस जलए
िाने ह|ैं
अनसु चू ी
क्रम स्ट्िाजपत भारतीय मानकों की सख्ं या, िर् भ प्रजतस्ट्िापन भारतीय मानकों, यदि िापस िापस होने की
स.ं जतजि जतजि
तिा िीर्भक जलए िान े ह,ैं की संख्या, िर् भ
तिा िीर्भक
(1) (2) (3) (4) (5)
08 अक्टूबर 08 अप्रलै
1 आई एस/आई एस ओ/आई ई सी 27036- आई एस/आई एस ओ/आई ई सी
2024 2025
27036-3 : 2013
6877 GI/2024 (1)2 THE GAZETTE OF INDIA : EXTRAORDINARY [PART III—SEC.4]
क्रम स्ट्िाजपत भारतीय मानकों की सख्ं या, िर् भ प्रजतस्ट्िापन भारतीय मानकों, यदि िापस िापस होने की
स.ं जतजि जतजि
तिा िीर्भक जलए िान े ह,ैं की संख्या, िर् भ
तिा िीर्भक
(1) (2) (3) (4) (5)
3 : 2023 सूचना प्रौद्योजगकी — सुरक्षा
तकनीक —आपूर्तभकरों के संबद्धों
साइबरसुरक्षा — आपूर्तभकारों से संबंध
हते ु सूचना सुरक्षा
भाग 3 हाडभिेयर, सॉफ्टिेयर और सेिा
भाग 3 सूचना एिं संचरण
आपूर्तभ श्रंखला सुरक्षा हते ु दििाजनिेि
प्रौद्योजगकी आपूर्तभ चने सुरक्षा
(पहला पनु रीक्षण )
हते ु मागभििी जसद्धांत
08 अक्टूबर लाग ूनहीं
2 आई एस/आई एस ओ/आई ई सी 27050- लाग ूनहीं
2024
2 : 2018
सूचना प्रौद्योजगकी — इलेक्रॉजनक खोि
भाग 2 इलेक्रॉजनक खोि के प्रिासन और
प्रबंधन के जलए मागभििनभ
08 अक्टूबर लाग ूनहीं
3 आई एस/आई एस ओ/आई ई सी 27071 लाग ूनहीं
2024
: 2023
साइबर सुरक्षा — युजियों और सेिाओं के
बीच संयोिन जििास स्ट्िाजपत करने के
जलए सुरक्षा की अनुिंसाएाँ
08 अक्टूबर लाग ूनहीं
4 आई एस/आई एस ओ/आई ई सी 27402 लाग ूनहीं
2024
: 2023
साइबर सुरक्षा — आईओटी सरु क्षा और
गोपनीयता —जडिाइस आधारभूत
अपेक्षाए ाँ
जचत्रा गुप्ता, िैज्ञाजनक िी एिं उप महाजनिेिक (हॉलमार्किंग)
[जिज्ञापन-III/4/असा./624/2024-25]
BUREAU OF INDIAN STANDARDS
(Department of Consumer Affairs)
NOTIFICATION
New Delhi, the 15th October 2024
Ref: HQ-PUB013/1/2020-PUB-BIS (1061)–– In pursuance of Sub-rule (1) of Rule (15) of the Bureau
of Indian Standards Rules, 2018, the Bureau of Indian Standards hereby notifies that Indian standards,
particulars of which are given in the second column of the schedule hereto annexed have been established on
the date indicated against it in third column. The particulars of the standards, if any which are given in the
fourth column shall also remain in force concurrently till they are withdrawn on the date indicated against
them in the fifth column.[भाग III—खण् ड 4] भारत का रािपत्र : असाधारण 3
SCHEDULE
Sl No., Year & Title of the Date of No. , Year & Title of the Date of
No. Indian Standards Established Establishment Indian Standards to be Withdrawal
Withdrawn, if any
(1) (2) (3) (4) (5)
08 October 2024
IS/ISO/IEC 27036-3 : 2013
IS/ISO/IEC 27036-3 : 2023 Information Technology — 08 April
Cybersecurity — Supplier Security Techniques — 2025
Relationships Information Security for
1
Part 3 Guidelines for Hardware Supplier Relationships
Software and Services Supply Part 3 Guidelines for
Chain Security Information and
(First Revision) Communication Technology
Supply Chain Security
08 October 2024
IS/ISO/IEC 27050-2 : 2018
Information Technology — NA
NA
2 Electronic Discovery
Part 2 Guidance for Governance
and Management of Electronic
Discovery
08 October 2024
IS/ISO/IEC 27071 : 2023
Cybersecurity — Security NA
NA
3 Recommendations for
Establishing Trusted
Connections Between Devices
and Services
08 October 2024
IS/ISO/IEC 27402 : 2023 NA
NA
4 Cybersecurity — IoT Security
and Privacy — Device Baseline
Requirements
CHITRA GUPTA ,Scientist G & DDG (Hallmarking)
[ADVT.-III/4/Exty./624/2024-25]
Uploaded by Dte. of Printing at Government of India Press, Ring Road, Mayapuri, New Delhi-110064
and Published by the Controller of Publications, Delhi-110054.