Email or username:

Password:

Forgot your password?
8 comments
Jan Wildeboer 😷:krulorange:

@honze_net If it is referenced as harmonised standard in EU law or regulations — yes. While the decision in this case is narrow as it is about 4 specific standards concerning toys and chemicals, it makes general statements on the connection between free access to law and referenced standards, so it should be a valid argument when EU law exists that references ISO 27001 as a harmonised standard.

Andreas Hontzia

@jwildeboer This is very good. Every citizen should be able to read those documents! Thanks for sharing!

Jan Wildeboer 😷:krulorange:

@honze_net The list of harmonised standards can be found at single-market-economy.ec.europ If and in which one ISO27001 is specifically mentioned — that I don't know as I didn't check.

Sebastian

@jwildeboer @leyrer
I'm afraid you're(/we're )🔩ed.

"A harmonised standard is a European standard developed by a recognised European Standards Organisation: CEN, CENELEC, or ETSI."

Sadly, the ISO-fish (and others) won't care what the european forest animals decide.

Jan Wildeboer 😷:krulorange:

@snaeqe @leyrer I specifically said harmonised standards throughout as I am very aware of that difference.

Jeroen Postma

@honze_net @jwildeboer This was already enforced by law though, and this decision seems to be about a case where adhering to the standard was required by law. So there's an explicit reference, hence the standard should be open.

ISO 27001 practices are not required by law, it's most often a requirement of – and regulated by – industry partners. So there's no explicit reference that will open the standard to the public.

Jeroen Postma

@honze_net @jwildeboer Addendum: I just considered that I may be confusing EU law with Dutch laws, where this was already implemented like this here.

If that's the case then applying it EU wide certainly seems great!

Nico Rikken

@honze_net
Had a similar question about ISO/IEC standards in this regard, especially as they aren't developed under the governance of the EU. As far as I know ISO27001 isn't referred to in law and so no requirements to make public. Would be interesting if somebody makes a similar case for standards referred to in procurement. I recall in Netherlands we already had some standards public because they were referred in the law.
@jwildeboer

Go Up