Security Management Systems

Security refers to the policies, procedures and technical measures used to prevent unauthorised access, alteration, theft and physical damage to information systems by outside hackers as well as employees. Security can be promoted with a range of tools and techniques to safeguard the computers hardware, software, communication networks and data. In... the early 1990s, representatives from some major organisations such as Shell, BT, Nationwide, and Marks and Spencer with both concern for information security and experience in management, put their resources together to define best practice. This document was published as a Public Document - PD0003 by the British Standards Institution, but was later converted to . The Standards committee then adapted the Code to become a better basis for certification by turning it into a specification for an information security management system. Thus was published. With the increase attention and pressure on security these standard have now become international with the publication of ISO 27001 Information technology - Information security management systems - Requirements and ISO 27001 Information technology - Code of practice for information security management. It was only a matter of time before an ISO security standard emerged for information technology. ISO 27001 is the international Information Security Management System (ISMS) standard which is a comprehensive set of controls comprising best practices in information security. It is intended to serve as a single reference point for identifying a range of controls needed for most situations where information systems are used in industry and commerce. ISO 17799 was first published as a DTI Code of Practice in the UK. It was rebadged and published as Version 1 of BS 7799, published in February 1995. It was not widely accepted for various reasons, such as not having a simplistic approach or being flexible enough. Version 2 was published in May 1999 which was a major revision. Formal certification and accreditation schemes ...Read More