ISO 17799
ISO 17799 provides
best practice recommendations on information
security management for use by
those who are responsible for initiating, implementing or
maintaining
Information Security Management
Systems (ISMS). The
Standard contains the twelve main sections:
·
Risk assessment and treatment
·
Organization of information security
·
Human resources security
·
Physical and environmental security
·
Information systems acquisition,
development and maintenance
·
Information security incident management
·
Business continuity management
·
Compliance