New ISO 17799 Security Standard Published

The official revision of the ISO 17799 security standard is now available. This has been under development for several years, and introduces a number of major changes to ISO17799. The old version, published initially in 2000, has been withdrawn with immediate effect.

ISO 17799 now contains eleven 'content' sections, as opposed to ten in the old version, with some existing chapters being re-worked and re-named. The new section format is as follows:

1) Security Policy
2) Organizing Information Security
3) Asset Management
4) Human Resources Security
5) Physical and Environmental Security
6) Communications and Operations Management
7) Access Control
8) Information Systems Acquisition, Development and Maintenance
9) Information Security Incident Management
10) Business Continuity Management
11) Compliance.

The new version also introduces security controls to address a variety of issues not previously covered. These include outsourcing provision and patch management. Other areas have been extended, such as employment termination, and distributed communication.

In addition to the content itself, steps have also been taken to make the standard more 'user friendly.'

Official Sources:
The following official outlet (BSI) has been updated to provide copies of the new standard:
http://www.standardsdirect.org/iso17799.htm

The ISO 17799 Toolkit, the standard's support kit, has also been updated to include the new version:
http://www.17799-toolkit.com

For further information see the ISO 17799 Newsletter archive site at:
http://17799-news.the-hamster.com

Contact:
Sara Hollins
07969727098
e-mail protected from spam bots

Author:  

Email:    

Topic:    

Content:

Related Articles

• Massive Credit Card Security Breach Puts 40 Million Consumers at Risk for Identity Theft
  19 June 2005



• Citadon to Extend its Online Security Offerings with Technology from Bharosa
  17 June 2005



• International Biometric Group Delivers Iris Recognition Test Report to the US Department of Homeland Security
  16 June 2005



• Elemental To Host Industry Webinar on Implementing Security Policies in Today's Dynamic Enterprise Networks
  14 June 2005



• Colorado Technical University Unveils Bachelor of Computer Networking and Security
  14 June 2005



• Corriente Networks Releases Elektron Enterprise Edition for Wi-Fi Security
  14 June 2005



• eIQnetworks' Network Security Analyzer Captures Coveted ''TechEd 2005 Best of Show Award'' In the Security
  13 June 2005



• S.A.Y. Security Group USA LLC and Hospitality WiFi LLC Formal Partnership Agreement
  11 June 2005



• Safend to Demonstrate Security System for U3 Smart Drive Computing Platform
  9 June 2005



• FLIR Systems Receives Order for Petrochemical Perimeter Security
  31 May 2005