The new standard ISO 27001:2005 (Information Technology –
Security techniques – Information security management systems –
Requirements) was published on 14 October 2005. It replaces BS
7799-2:2002.
Information in any form is an asset that should be protected and
preserved, especially if you are responsible for securing your
customer's information. Failure to achieve this can mean a loss
of business, reputation and result in costly litigation (recent
claims in the USA have resulted in 9 figure settlements). ISO
27001 provides safeguards and controls to ensure that the
integrity, confidentiality and availability of information are
preserved. It provides the foundation for an Information
Security Management System (ISMS) and applies to all sizes of
organization in all business sectors. ISMS certification allows
you to demonstrate to your customers, suppliers and governmental
organizations that you are dedicated to information security.
|