Overview
ISO/IEC 10164-8:1993/Cor 3:1999 is a Technical Corrigendum to the ISO/IEC 10164-8:1993 standard (aligned with ITU‑T Rec. X.740) that updates the Open Systems Interconnection (OSI) Systems Management - Security audit trail function specification. Published 1999-11-01 by Joint Technical Committee ISO/IEC JTC 1, this corrigendum makes targeted corrections to ASN.1 imports and attribute identifier (ATTRIBUTE IDS) definitions to ensure consistent object/module referencing and interoperability for security audit trail implementations.
Key Topics
- ASN.1 module import correction (Subclause A.1):
- Adds an IMPORTS statement for ServiceReportCause from the SecurityAuditTrail-ASN1Module with the joint-iso-ccitt OID path, clarifying module-level dependencies.
- Attribute identifier revisions (Subclauses A.4.1 and A.4.2):
- Replaces previous ATTRIBUTE IDS blocks with explicit mappings to CCITT Rec. X.721 (1992) / ISO/IEC 10165-2:1992 attributes:
- serviceReportCause
- notificationIdentifier
- correlatedNotifications
- additionalText
- additionalInformation
- Ensures the Security Audit Trail function references the correct notification and supplemental information attributes.
- Standards alignment and interoperability:
- The corrigendum aligns ISO/IEC 10164-8 with related ITU‑T/ISO systems management modules, reducing ambiguity in implementations.
Applications
- Implementers of OSI Systems Management: developers integrating the Security Audit Trail function in network management products will use these corrections when generating or validating ASN.1 modules and object identifiers.
- Network equipment and security vendors: ensures audit trail objects and notifications are consistently defined across products for reliable logging, notification correlation, and security forensics.
- Standards maintainers and conformance testers: useful for test suites and compliance checks that validate attribute identifiers and ASN.1 imports against the canonical standard.
- Security auditors and system integrators: helps ensure audit data produced by OSI-based management systems carries the standardized notification identifiers and additional information fields required for cross-vendor analysis.
Related Standards
- ITU‑T Recommendation X.740 (1992) / Corr.3 (1998 E)
- CCITT Rec. X.721 (1992) / ISO/IEC 10165-2:1992 (notification and additional information attribute definitions)
- ISO/IEC 10164-8:1993 (base standard for the Security audit trail function)
This Technical Corrigendum is editorial/technical in scope-focused on ASN.1 and attribute identifier consistency-so implementers should apply these updates to existing ISO/IEC 10164-8 ASN.1 modules to maintain interoperability and correct notification handling in OSI systems management.