Author: Alan CalderPublisher:
ISBN: 9789077212783
Category : Language Arts & Disciplines
Languages : en
Pages : 0
Book Description
This management guide looks at IT Security management with reference to the ISO standards that organisations use to demonstrate compliance with recommended best practice. ISO17799 has been developed as an international standard for information security management to enable organisations to be able to implement information security controls to meet their own business requirements as well as a set of controls for their business relationships with other organisations. The ISO/IEC 17799:2000 Code of Practice was intended to provide a framework for international best practice in Information Security Management and systems interoperability. It also provided guidance on how to implement an ISMS that would be capable of certification, and to which an external auditor could refer. ISO 17799 also provides substantial implementation guidance on how individual controls should be approached. ISO 27001 provides the basis for an international certification scheme. Anyone implementing an ISO 27001 ISMS will need to acquire and study copies of both ISO 27001 and ISO 17799. ISO 27001 mandates the use of ISO 17799 as a source of guidance on controls, control selection and control implementation.