Foreword

Publishing information

This British Standard is published by BSI Standards Limited, under licence from The British Standards Institution, and came into effect on 31 August 2016. It was prepared by Subcommittee GW/3/-/26, Security Consultancy, under the authority of Technical Committee GW/3, Private Security Management & Services. A list of organizations represented on this committee can be obtained on request to its secretary.

Supersession

This British Standard supersedes BS 8549:2006, which is withdrawn.

Information about this document

This is a full revision of the standard, and introduces the following principal changes:

• new recommendations with regard to:
- • data backup;
- • implementation, verification and testing;
• the addition of Annex A, Example code of conduct.

As a code of practice, this British Standard takes the form of guidance and recommendations. It should not be quoted as if it were a specification and particular care should be taken to ensure that claims of compliance are not misleading.

Any user claiming compliance with this British Standard is expected to be able to justify any course of action that deviates from its recommendations.

Presentational conventions

The provisions of this standard are presented in roman (i.e. upright) type. Its recommendations are expressed in sentences in which the principal auxiliary verb is “should”.

Commentary, explanation and general informative material is presented in smaller italic type, and does not constitute a normative element.

Requirements in this standard are drafted in accordance with Rules for the structure and drafting of UK standards, subclause J.1.1, which states, “Requirements should be expressed using wording such as: ‘When tested as described in Annex A, the product shall ...’”. This means that only those products that are capable of passing the specified test will be deemed to conform to this standard.

Contractual and legal considerations

This publication does not purport to include all the necessary provisions of a contract. Users are responsible for its correct application.

Compliance with a British Standard cannot confer immunity from legal obligations.

BS 8549:2016

Security consultancy. Code of practice

Current

Published:

31 Aug 2016