Is ISO 17799 still valid?

Is ISO 17799 still valid?

ISO 17799 Information Security Standard. ISO 17799 is obsolete. Please see ISO IEC 27002 2013. program or improve its current information security practices.

What replaced ISO 17799?

ISO 27002
ISO 17799 is expected to be renamed ISO 27002 in 2007. In the works is ISO 27004 – Information Security Management Metrics and Measurement – currently in draft mode. ISO 27001 is the formal standard against which organizations may seek independent certification of their information security management systems.

What is the purpose of the ISO IEC 17799?

‘ISO/IEC 17799:2005 establishes guidelines and general principles for initiating, implementing, maintaining, and improving information security management in an organization. The objectives outlined provide general guidance on the commonly accepted goals of information security management.

What are the ISO 17799 domains?

ISO/IEC 17799 comprises 10 security domains and seeks to address security compliance at all levels: managerial, orga- nizational, legal, operational, and techni- cal. It includes 36 control objectives, con- sisting of general statements of security goals for each of the 10 domains.

What is ISO in information technology?

ISO/IEC 27001:2013 (also known as ISO27001) is the international standard for information security. It sets out the specification for an information security management system (ISMS).

What is the latest ISO 27002 standard?

ISO 27002:2013
ISO/IEC 27002, the most recent of which is ISO 27002:2013, has a close association with ISO 27001. Broadly speaking, it gives guidance on the implementation of ISO 27001.

What is the purpose of ISO 27002?

The ISO 27002 standard is a collection of information security guidelines that are intended to help an organization implement, maintain, and improve its information security management.

What is BS7799 security standard?

BS7799 was created in 1995, by the British Standards Institution (BSI), as a standard to guide the development and implementation of an Information Security Management System, commonly known as an ISMS.

How many controls are there in ISO 27002?

ISO/IEC 27002 specifies some 35 control objectives (one per ‘security control category’) concerning the need to protect the confidentiality, integrity and availability of information.