ISO/IEC 24760-3:2025Published

Information security, cybersecurity and privacy protection — A framework for identity management — Part 3: Practice

Sécurité de l'information, cybersécurité et protection de la vie privée — Cadre pour la gestion de l'identité — Partie 3: Mise en œuvre

Abstract / scope

This document:

  • provides requirements and guidance for the management of identity information and for ensuring that an identity management system conforms to ISO/IEC 24760-1 and ISO/IEC 24760-2;
  • is applicable to any information system where information relating to identity is processed or stored;
  • is considered to be a horizontal document for the following reasons:
    • it applies concepts such as distinguishing the term “identity” from the term “identifier” on the implementation of systems for the management of identity information and on the requirements for the implementation and operation of a framework for identity management,
    • it provides an important contribution to assess identity management systems with regard to their privacy-friendliness and their ability to assure the relevant attributes of an identity, and consequently it provides a foundation and a common understanding for any other standard addressing identity, identity information, and identity management.

Life cycle

Replaces

ISO/IEC 24760-3:2016WithdrawnInformation technology — Security techniques — A framework for identity management — Part 3: PracticeInternational Standard · Published 21 Jul 2016 · ISO/IEC JTC 1/SC 27ISO/IEC 24760-3:2016/Amd 1:2023WithdrawnInformation technology — Security techniques — A framework for identity management — Part 3: Practice — Amendment 1: Identity Information Lifecycle processesInternational Standard · Published 31 Jan 2023 · ISO/IEC JTC 1/SC 27