Information Security

BS 7799-2

In connection with the structure and contents of the BS 7799 standard published in 1995, many of those trying to apply it have felt that the guidelines do not meet their expectations. In 1998, the standard BS 7799-2, entitled Specification for Information Security Management Systems , was published as a complement to the first part.
The second part of A BS 7799 is currently a British standard, but it is already applied in some European countries (e.g. in Norway and Switzerland) and by some international financial institutions.
The second part of BS 7799 determines requirements first of all for the management of the organizations for the implementation of the Information Security Management System (ISMS) and concerning its documentation system, and it makes recommendation for IT security actions on the organization level, based on comprehensive risk assessment.

• TCSEC
• ITSEC
• Common Criteria 2.1 (ISO/IEC 15408:1999)
• ITIL 2. (BS 15000:2000)
• BS 7799-1 (ISO/IEC 17799:2000)
• BS 7799-2
• ISO 9000-3
• COBIT 3

Print page

Top of the page

Back