Monday, December 29, 2008

The stepping stone for information security management based on internationally recognized standards.

Many organizations are actively looking to improve information security practices and establish formal programs for enterprise security. For some, the goal is to improve overall compliance with regulations and internal security requirements, while others seek to prove effective security and privacy practices to third-party partners, vendors and customers. As a template for security management, many are turning to internationally recognized information security standards such as "ISO 27001 - Information Security Management Systems - Requirements" and the companion standard "ISO 17799 - Code of Practice for Information Security Management".To help organizations establish the plan for moving forward in building and adopting manageable security programs based on ISO standards, Accuvant has developed a comprehensive ISO Gap Analysis service. Through this offering, Accuvant guides clients through the cycle of evaluating their current state of information security programs against best practices defined by ISO 27001 and ISO 17999, identifying deviations in existing security controls and defining the steps necessary for improvement.

No comments:

Post a Comment