B2B Continuity.com
Business Continuity Planning & Disaster Recovery Planning

   Business Continuity Planning (BCP)
   Disaster Recovery Planning (DRP)
   Emergency Measures Planning (EMP)
   Crisis Management (EM)
   Emergency Operations Centre (EOC)

   Areas Of Specialization
   BS 7799 & ISO 17799 Security

   Clients & Testimonials
   FAQ's Frequently Asked Questions
   Training

   Feedback Form
   Preparedness Survey
   Links

   Executive Summary


"The man with a new idea is a crank until the idea succeeds."

Mark Twain    


ISO 17799 & BS 7799 Compliance

ISO17799, is a detailed security standard. It is organised into ten major sections, each covering a different topic or area. It evolved from British Standard for Information Security Management (BS 7799).

  1. Business Continuity Planning - ISO 17799 (BS 7799)
    The objectives of this section are:
    To counteract interruptions to business activities and to critical business processes from the effects of major failures or disasters.

  2. System Access Control - ISO 17799 (BS 7799)
    The objectives of this section are:
    1) To control access to information
    2) To prevent unauthorised access to information systems
    3) To ensure the protection of networked services
    4) To prevent unauthorized computer access
    5) To detect unauthorised activities.
    6) To ensure information security when using mobile computing and tele-networking facilities

  3. System Development and Maintenance - ISO 17799 (BS 7799)
    The objectives of this section are:
    1) To ensure security is built into operational systems;
    2) To prevent loss, modification or misuse of user data in application systems;
    3) To protect the confidentiality, authenticity and integrity of information;
    4) To ensure IT projects and support activities are conducted in a secure manner;
    5) To maintain the security of application system software and data.

  4. Physical and Environmental Security - ISO 17799 (BS 7799)
    The objectives of this section are:
    To prevent unauthorised access, damage and interference to business premises and information; to prevent loss, damage or compromise of assets and interruption to business activities; to prevent compromise or theft of information and information processing facilities.

  5. Compliance - ISO 17799 (BS 7799)
    The objectives of this section are:
    1) To avoid breaches of any criminal or civil law, statutory, regulatory or contractual obligations and of any security requirements
    2) To ensure compliance of systems with organizational security policies and standards
    3) To maximize the effectiveness of and to minimize interference to/from the system audit process.

  6. Personnel Security - ISO 17799 (BS 7799)
    The objectives of this section are:
    To reduce risks of human error, theft, fraud or misuse of facilities; to ensure that users are aware of information security threats and concerns, and are equipped to support the corporate security policy in the course of their normal work; to minimise the damage from security incidents and malfunctions and learn from such incidents.

  7. Security Organisation - ISO 17799 (BS 7799)
    The objectives of this section are:
    1) To manage information security within the Company;
    2) To maintain the security of organizational information processing facilities and information assets accessed by third parties.
    3) To maintain the security of information when the responsibility for information processing has been outsourced to another organization.

  8. Computer & Network Management - ISO 17799 (BS 7799)
    The objectives of this section are:
    1) To ensure the correct and secure operation of information processing facilities;
    2) To minimise the risk of systems failures;
    3) To protect the integrity of software and information;
    4) To maintain the integrity and availability of information processing and communication;
    5) To ensure the safeguarding of information in networks and the protection of the supporting infrastructure;
    6) To prevent damage to assets and interruptions to business activities;
    7) To prevent loss, modification or misuse of information exchanged between organizations.

  9. Asset Classification and Control - ISO 17799 (BS 7799)
    The objectives of this section are:
    To maintain appropriate protection of corporate assets and to ensure that information assets receive an appropriate level of protection.

  10. Security Policy - ISO 17799 (BS 7799)
    The objectives of this section are:
    To provide management direction and support for information security.

Formal Contingency Planning is now an essential component of the ISO 17799 Standard.

We are pleased to assist you in the preparation and implementation of a complete and professional Business Continuity Plan to ensure a successful ISO 17799 result.



     Privacy   Contact Us   About B2BContinuity.com   Terms of Use   Home
          © 2002 B2BContinuity.com. All rights reserved.