{"framework":"hk-s17","country":"hk","title":"Baseline IT Security Policy (S17)","shortTitle":"HK S17","oscalVersion":"1.2.3","catalogVersion":"8.2","status":"current","authoritativeOscal":false,"identitySibling":null,"versions":[{"version":"8.2","href":"/frameworks/hk-s17/8.2"}],"latest":{"version":"8.2","href":"/frameworks/hk-s17/latest"},"profiles":[{"pid":"baseline","label":"S17 Baseline","href":"/frameworks/hk-s17/8.2/profiles/baseline"},{"pid":"area-07-management-responsibilities","label":"Area 7 — Management Responsibilities","href":"/frameworks/hk-s17/8.2/profiles/area-07-management-responsibilities"},{"pid":"area-08-it-security-policies","label":"Area 8 — IT Security Policies","href":"/frameworks/hk-s17/8.2/profiles/area-08-it-security-policies"},{"pid":"area-09-human-resource-security","label":"Area 9 — Human Resource Security","href":"/frameworks/hk-s17/8.2/profiles/area-09-human-resource-security"},{"pid":"area-10-asset-management","label":"Area 10 — Asset Management","href":"/frameworks/hk-s17/8.2/profiles/area-10-asset-management"},{"pid":"area-11-access-control","label":"Area 11 — Access Control","href":"/frameworks/hk-s17/8.2/profiles/area-11-access-control"},{"pid":"area-12-cryptography","label":"Area 12 — Cryptography","href":"/frameworks/hk-s17/8.2/profiles/area-12-cryptography"},{"pid":"area-13-physical-and-environmental-security","label":"Area 13 — Physical and Environmental Security","href":"/frameworks/hk-s17/8.2/profiles/area-13-physical-and-environmental-security"},{"pid":"area-14-operations-security","label":"Area 14 — Operations Security","href":"/frameworks/hk-s17/8.2/profiles/area-14-operations-security"},{"pid":"area-15-communications-security","label":"Area 15 — Communications Security","href":"/frameworks/hk-s17/8.2/profiles/area-15-communications-security"},{"pid":"area-16-system-acquisition-development-and-maintenance","label":"Area 16 — System Acquisition, Development and Maintenance","href":"/frameworks/hk-s17/8.2/profiles/area-16-system-acquisition-development-and-maintenance"},{"pid":"area-17-outsourcing-security","label":"Area 17 — Outsourcing Security","href":"/frameworks/hk-s17/8.2/profiles/area-17-outsourcing-security"},{"pid":"area-18-security-incident-management","label":"Area 18 — Security Incident Management","href":"/frameworks/hk-s17/8.2/profiles/area-18-security-incident-management"},{"pid":"area-19-it-security-aspects-of-business-continuity-management","label":"Area 19 — IT Security Aspects of BCM","href":"/frameworks/hk-s17/8.2/profiles/area-19-it-security-aspects-of-business-continuity-management"},{"pid":"area-20-compliance","label":"Area 20 — Compliance","href":"/frameworks/hk-s17/8.2/profiles/area-20-compliance"}],"counts":{"groups":15,"controls":142,"params":0,"backMatterResources":9},"copyright":"© Office of the Government Chief Information Officer (OGCIO), Hong Kong SAR. Unofficial OSCAL conversion.","source":{"repo":"badenh/hk-s17-baseline-itsecpol-oscal","upstream":false},"provenance":"/provenance/hk-s17"}