ISO/IEC 17799: Code of Practice for Information Security Management
ISO/IEC 17799: Code of Practice for Information Security Management is a generic set of best
practices for the security of information systems. Considered the foremost security specification
document in the world, the code of practice includes guidelines for all organizations, no matter
what their size or purpose. 17799 was originally published in the United Kingdom as DT Code of
Practice, and then later as BS 7799.
The ISO/IEC 17799 details 127 security measures, organized into 10 sections; these specify best
practices for: business continuity planning; system access control; system development and
maintenance; physical and environmental security; compliance; personnel security; security
organization; computer and operations management; asset classification and control; and security
policies. The purpose of the code of practice is to be as comprehensive as possible, covering
practices that are applicable to a broad range of endeavors. The document suggests that particular
organizations can benefit from selecting those specifications that apply to them.
The document is currently being revised to provide sufficient detail to enable the development
of a security management system.
This was last updated in October 2008
Email Alerts
Register now to receive SearchSoftwareQuality.com-related news, tips and more, delivered to your inbox.
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States.
Privacy
Dig Deeper
-
Software consultant Nari Kannan describes how agile practices and work can be scaled appropriately for success in large organizations. Using lean thinking, reduction of waste, and appropriately organizing work and people, agile can be successfully adapted, regardless of the size of the organization.
-
Undiscovered software glitches in complex systems are common, and one of the primary drivers is the loss of mainframe knowledge of a retiring workforce. Software glitches are lurking in many large systems, particularly mainframe systems, and the COBOL programmers that understand the code best are retiring, according to Jeff Papows, author of the new book, "Glitch - The hidden impact of faulty software." Papows describes how faulty software caused a huge charge to debit card holder's account and why such mistakes are on the rise in this interview. Papows notes the three most pressing drivers for software glitches: loss of intellectual knowledge, market consolidation and the ubiquity of technology
-
Karen Johnson suggests a variety of ways that testers can gain additional skills and experience, including social networking and open source testing.
-
People who read this also read...
-
Resources from around the Web