What is Information Security, BS7799 and ISO17799?

BS7799 / ISO17799

What is information security?

Information is an asset which, like other important business assets, has value to an organization and consequently needs to be suitably protected. Information security protects information from a wide range of threats in order to ensure business continuity, minimize business losses and maximize return on investments and business opportunities.

Information can exist in many forms. It can be printed or written on paper, stored electronically, transmitted by post or using electronic means, shown on films, or spoken in conversation. Whatever form the information takes, whatever the means by which it is shared or stored, it should always be appropriately protected.

Information security consists of preserving the following elements:

Confidentiality: ensuring that information can only be accessed by those with the proper authorization;
Integrity: safeguarding the accuracy and completeness of information and the ways in which it is processed;
Availability: ensuring that authorized users have access to information and associated assets whenever required.

Information security is achieved by implementing a suitable set of controls, which could be policies, practices, procedures, organizational structures and software

Web Sites

Callio Technologies BS7799/ISO17799

BS7799 ISO17799 Security Standards

BS7799 ISO17799 Methodology

ISO17799 BS7799 Discussion Group

BS7799 ISO17799 Methodology Group