Security BS7799 / ISO17799

Home> Services > Security > BS7799 / ISO17799

Security

BS7799 / ISO17799

BS7799 is the British standard that provides guidelines for safeguarding an organisations asset. BS7799 comes in two parts ISO/IEC 17799 and BS7799. ISO/IEC 17799 is a standard code of practice that provides an organisation with default guidelines on the types of security controls an organisation should implement to safeguard their assets. The scope of this standard covers, voice, Internet, phones faxes, etc. BS7799 is a management standard specification for Information Security Management Systems (ISMS). This instructs an organisation on the necessary steps required in establishing a management framework; it encompasses the people, the IT system and the processes within your organization

Security Management Requires to Achieve

Identify the assets to be protected
Define an organisations approach to risk management
Define and identify the control objectives and the controls
Define the degree of assurance required

The controls as defined in BS7799 are: :

Security Policy Organization security
Asset classification and control
Personnel security
Physical and environmental security
Communications and operations management

Security Auditing

Security Penetration

Assessment Risk Analysis

Assessment Vulnerabilities

FireWall

BS7799 / ISO17799

Public Key Infrastructure (PKI)

Telephone Security