ISO/IEC TS 19608:2018
Guidance for developing security and privacy functional requirements based on ISO/IEC 15408
Available Formats:
- Availability: Immediate Download
- Language: English
- License Type: Single User
- Updates: Not Included
- Availability: Request Quote
- Language: English
- License Type: Enterprise / Multi User
- Updates: Included
About This Item
ISO/IEC TS 19608:2018 provides guidance for developing security and privacy functional requirements based on ISO/IEC 15408, making it relevant for teams that need a structured basis for technical assessment and compliance preparation. The document helps organizations translate security and privacy objectives into clearer functional requirements for product evaluation, documented review, and conformity assessment workflows. For engineering, procurement, and assurance teams, it can serve as a useful reference when aligning requirements with risk management and verification activities.
ISO/IEC TS 19608:2018 standard overview
As a technical specification, ISO/IEC TS 19608:2018 is best understood as supporting guidance connected to the parent reference ISO/IEC TS 19608. Its focus is on the development of security and privacy functional requirements using ISO/IEC 15408 as the underlying basis. In practice, that means it may help teams structure requirements in a way that supports technical review, engineering documentation, and compliance-oriented evaluation. The edition and publication context make it a relevant reference for organizations working on secure system specifications and assessment preparation.
Applications of ISO/IEC TS 19608:2018
ISO/IEC TS 19608:2018 is commonly relevant where security and privacy requirements must be defined, reviewed, or verified as part of a controlled development process. It may be used by product teams, evaluators, laboratories, and compliance functions involved in technical validation, security assurance, or procurement review. Typical workflows include preparing requirement sets for assessment, supporting documented evaluation of system behavior, and improving consistency between design intent and verification activities. It is especially useful when organizations need a compliance reference that connects functional expectations to established assurance practices.
Why ISO/IEC TS 19608:2018 matters
This document matters because well-defined security and privacy requirements are often the starting point for reliable conformity assessment and risk reduction. ISO/IEC TS 19608:2018 can support more consistent engineering decisions, clearer testing workflows, and better alignment between development teams and assurance stakeholders. By helping structure requirements around ISO/IEC 15408, it may also improve traceability during quality workflows, technical assessment, and procurement checks. For organizations preparing evidence for review or validation, that can reduce ambiguity and strengthen operational consistency.
- Guidance for deriving security and privacy functional requirements from ISO/IEC 15408
- Support for technical review, requirement traceability, and documented evaluation
- Useful in compliance workflows, conformity assessment preparation, and procurement analysis
- Relevant to verification activities, risk management, and quality assurance planning
- Publication Date: 2018-10-19
- Standard Status: Derived
- Publisher: IEC
- Edition: 1
- This Version: ISO/IEC TS 19608 (2018-10-19)
Please request information about the document. Contact Page
Need This Standard?
Request a personalized quote today to receive the latest edition in PDF or other available formats.
Need This Standard?
Request a personalized quote today to receive the latest edition in PDF or other available formats.
Summarize with AI
Get quick summaries using your favorite AI engine.
Online Standart Disclaimer
OnlineStandart.com is an authorized reseller of international standards, operating through partnerships with authorized distributors. We do not own the copyrights or trademarks of the standards we sell, including but not limited to those of API, ASHRAE, BSI, SAE, ASTM, IEEE, IEC, ASME, ISO, and others.
All product names, logos, and brands are the property of their respective owners and are used for identification purposes only; their use does not imply endorsement. OnlineStandart.com is not affiliated with or endorsed by any standards development organization unless explicitly stated. The content of this document is for informational purposes only and is intended to promote our licensed reselling services.
Online Standart does not host, distribute, or link to free, unlicensed, or uncertified copies of copyrighted standards. Every document we deliver is a licensed copy obtained through authorized channels and supplied with full licensing documentation. The “Free PDF Download” option on our product pages refers to this free informational document — never to a free copy of any standard.