BRITISH STANDARDS BS ISO/IEC 27001:2005/BS 7799-2:2005

BRITISH STANDARDS BS ISO/IEC 27001:2005/BS 7799-2:2005

Information technology. Security techniques. Information security management systems. Requirements

DOWNLOAD PDF : Member Price £45

BS ISO/IEC 27001:2005 covers all types of organizations (e.g. commercial enterprises, government agencies, non-profit organizations) and specifies requirements for establishing, implementing, operating, monitoring, reviewing, maintaining and improving a documented information security management system (ISMS) within the context of the organization’s overall business risks. It specifies requirements for the implementation of security controls customized to the needs of individual organizations.

The ISMS is designed to ensure the selection of adequate and proportionate security controls that protect information assets and give confidence to interested parties. If an organization already has an operative business process management system (e.g. in relation to ISO 9001 or ISO 14001), it is preferable in most cases to satisfy the requirements of this International Standard within the existing management system.

BS ISO/IEC 27001:2005 Frequently asked questions

Contents of BS ISO/IEC 27001 contain:
Foreword
Introduction
Scope
Normative references
Terms and definitions
Information security management system
Management responsibility
Internal ISMS audits
Management review of the ISMS
ISMS improvement
Control objectives and controls
OECD principles and this International Standard
Correspondence between ISO 9001:2000, ISO 14001:2004 and this
International Standard
Bibliography

This standard replaces BS 7799-2:2002.

Standard Number    BS ISO/IEC 27001:2005/BS 7799-2:2005

Title    Information technology. Security techniques. Information security management systems. Requirements

Status    Current

Publication Date    18 October 2005

Cross References    ISO/IEC 17799:2005, ISO 9001:2000, ISO/IEC 13335-1:2004, ISO/IEC TR 13335-3:1998, ISO/IEC TR 13335-4:2000, ISO 14001:2004, ISO/IEC TR 18044:2004, ISO 19011:2002, ISO/IEC Guide 62:1996, ISO/IEC Guide 73:2002

Replaces    BS 7799-2:2002

International Relationships    ISO/IEC 27001:2005 Identical

Draft Superseded    04/30126470 DC

Descriptors    Data processing, Computers, Management, Data security, Data storage protection, Anti-burglar measures, Information systems, Documents, Records (documents), Classification systems, Computer technology, Computer networks, Technical documents, Maintenance, Information exchange

ICS    35.040 (Character sets and information coding)

Title in French    Technologies de l’information. Techniques de securite. Systemes de gestion de securite de l’information. Exigences

Committee    IST/33

ISBN    0 580 46781 3

Publisher    BSI

Format    A4

Delivery    YES

Pages    44

Price    £ 90.00