BS ISO/IEC 27002:2005 is the international standard for information security management, helping you to achieve legal compliance, industry reputation and stakeholder confidence. It outlines the general principles of designing, implementing, maintaining and improving data security. BS ISO/IEC 27002:2005 also includes practical guidelines for developing security standards and effective information management across your organisation. Compliance with the standard will allow you to put in place effective risk management and audit controls.
BS ISO/IEC 27002:2005 provides recommendations and guidance on meeting the international information security standard. This code of practice helps you to develop information security guidelines that are specific to your business and provides the foundation for your own management systems. The standard is not restricted by sector and outlines ways to achieve data security through robust storage and protections, as well as processing. The standard can be used to monitor and improve computer systems and the way you share information.
Contents of BS ISO/IEC 27002:2005 include:
This code of practice may be regarded as a starting point for developing organization-specific guidelines. Not all of the controls and guidance in this code of practice may be applicable.
Furthermore, additional controls and guidelines not included in this standard may be required.
When documents are developed containing additional guidelines or controls, it may be useful to include cross-references to clauses in this standard where applicable to facilitate compliance checking by auditors and business partners.
We are global, we’re independent and we’re trusted service provider to 80,000 businesses. We operate in 147 countries and are the number one certification body in the UK and US. We created 85% of our portfolio because we know standards and we know your business. We’re leaders and we can make you one too.
ISO/IEC 17799:2005/Cor 1:2007