What is ISO/IEC 27038 - Security techniques - Specification for digital redaction about?
ISO/IEC 27038 specifies characteristics of techniques for performing digital redaction on digital documents.
ISO/IEC 27038 also specifies requirements for software redaction tools and methods of testing that digital redaction has been securely completed.
Note: This International Standard does not include the redaction of information from databases.
Who is ISO/IEC 27038 - Security techniques - Specification for digital redaction for?
ISO/IEC 27038 on security techniques - Specification for digital redaction is useful for:
- Information technology industry
- Data handling agencies
- Software engineers
Why should you use ISO/IEC 27038 - Security techniques - Specification for digital redaction?
Some documents can contain information that must not be disclosed to some communities. Modified documents can be released to these communities after appropriate processing of the original document. This processing can include the removal of sections, paragraphs, or sentences with, where appropriate, the mention that they have been removed. This process is called the “redaction” of the document.
The digital redaction of documents is a relatively new area of document management practice, raising unique issues and potential risks. Where digital documents are redacted, removed information must not be recoverable. Hence, care needs to be taken so that redacted information is permanently removed from the digital document (e.g. it must not be simply hidden within non displayable portions of the document).
ISO/IEC 27038 specifies methods for digital redaction of digital documents.
The process of digital redaction as specified in ISO/IEC 27038 allows you to not only remove the information but also to indicate where necessary that some information has been removed so that the reader knows that the document has been redacted.