This document should be ordered at
http://www.iso.org/iso/en/CatalogueDetailPage.CatalogueDetail?CSNUMBER=39612
<http://www.iso.org/iso/en/CatalogueDetailPage.CatalogueDetail?CSNUMBER=39612&ICS1=35&ICS2=40&ICS3>
&ICS1=35&ICS2=40&ICS3=
Best regards,
Andreas Habedank
----------------
HBDK.DE - IT-Security Management & Consulting - Ledersberg 3 - 83727 Schliersee
----------------
mobil: 0173/914 22 53 - email: info@hbdk.de - web: http://www.hbdk.de
<http://www.hbdk.de/>
----------------
PGP Fingerprint - 33A6 D209 6D80 E9C4 E00E 6E52 2DAD 71CB BFBE 8E61 -
_____
Von: Ozan Ozkara [mailto:ozan@stealthfire.net]
Gesendet: Freitag, 11. November 2005 23:35
An: Oud, Ernst (NL - Amstelveen)
Cc: john_blackley@dell.com; security-management@securityfocus.com
Betreff: RE: ISO Certification
where can i download ISO 17799:2005? because i couldn't find on google and
emule...
-ozan
On Thu, 2005-11-10 at 09:05 +0100, Oud, Ernst (NL - Amstelveen) wrote:
John, All,
There is NO such thing as ISO 17799 certification. This can never be possible
since this standards is a guidance document, not a
specfication. Certification of an ISMS is always against ISO 27001:2005
(previously BS7799-2:2002 until October 18th).
Regards,
Ernst J. Oud
Deloitte
_____
From: john_blackley@dell.com [mailto:john_blackley@dell.com]
Sent: Tue 11/8/2005 20:17
To: security-management@securityfocus.com
Subject: Re: ISO Certification
I wasn't aware that there is such a thing as an 'ISO17799' certification. I'm
happy to look into it.
ISO17799 is a code of practice for information security. BS7799:2 is a standard
specification for information security management
systems (ISMS).
You CAN achieve certification against BS7799:2. In order to be awarded a
certificate, a BS7799 assessor will audit the ISMS. The
assessor cannot also be a consultant. There are very strict rules about this.
The assessor will work for a Certification Body (such
as Det Norske Veritas and BSI Assessment Services Limited).
Hope this helps.
John
_____
--------------------------------------------------------------------------------
This e-mail message and its attachments are subject to the disclaimer published
at the following website of Deloitte :
http://www.deloitte.com/nl/disclaimer
smime.p7s
Description: S/MIME cryptographic signature
