[CISSP-D] BS7799 ppt presentation

Wajahat, 

BS7799 talks about the business requirement for security....
I strongly recommend that you should allocate first chunk of budget  to get 
risk assessment done. Then you can run to procure products, solutions, 
services. First you need to know which assets you have to protect and 
priority matrix on the same. I have seen many people who directly run to buy 
products without knowing actual requirements. 


You will get lot of surveys, global spendings on security etc. But we have 
to be specific about our organisations.  I agree with points mooney has put 
in.. 

Once your risk assessment is done, automatically you will get answers and 
analysis specific to your requirements of security. 

Do you have a copy of BS7799? You can pick up points from that... 

I think this helps... Let me know if you have more doubts/questions on the 
same.. 


Regards,
Sameer Ahirrao
Security Value Analyst
Bindview Corp.
Ph: +91 9823641085 





------------------------ Yahoo! Groups Sponsor --------------------~--> 
$9.95 domain names from Yahoo!. Register anything.
http://us.click.yahoo.com/J8kdrA/y20IAA/yQLSAA/kgFolB/TM
--------------------------------------------------------------------~-> 

 
Yahoo! Groups Links

<*> To visit your group on the web, go to:
    http://groups.yahoo.com/group/CISSP-Discuss/

<*> To unsubscribe from this group, send an email to:
    CISSP-Discuss-unsubscribe@yahoogroups.com

<*> Your use of Yahoo! Groups is subject to:
    http://docs.yahoo.com/info/terms/