You can get a copy at:
http://www.bsitraining.com/infosecurity_standards.asp
You have to pay for it. It is NOT a free document.
Clement
Clément Dupuis, CD
President/Security Evangelist/Chief Learning Officer (CLO)
CCCure Enterprise Security & Training Inc.
CISSP, GCFW, GCIA, Security+, CEH, CCSA, MBNS, MBIS, MBHS, CCSE, ACE
Tel: 954 364 8410 (Florida)
Tel: 514 907 1671 (Montreal)
Tel: 418 907 0263 (Quebec)
Fax: 636 773 6328
Maintainer of :
The CISSP and SSCP Open Study Guides Web Site
<http://www.cccure.org/> http://www.cccure.org
The Professional Security Testers Warehouse
<http://www.professionalsecuritytesters.org/>
http://www.professionalsecuritytesters.org
_____
From: Ozan Ozkara [mailto:ozan@stealthfire.net]
Sent: Friday, November 11, 2005 5:35 PM
To: Oud, Ernst (NL - Amstelveen)
Cc: john_blackley@dell.com; security-management@securityfocus.com
Subject: RE: ISO Certification
where can i download ISO 17799:2005? because i couldn't find on google and
emule...
-ozan
On Thu, 2005-11-10 at 09:05 +0100, Oud, Ernst (NL - Amstelveen) wrote:
John, All,
There is NO such thing as ISO 17799 certification. This can never be
possible since this standards is a guidance document, not a specfication.
Certification of an ISMS is always against ISO 27001:2005 (previously
BS7799-2:2002 until October 18th).
Regards,
Ernst J. Oud
Deloitte
_____
From: john_blackley@dell.com [mailto:john_blackley@dell.com]
Sent: Tue 11/8/2005 20:17
To: security-management@securityfocus.com
Subject: Re: ISO Certification
I wasn't aware that there is such a thing as an 'ISO17799' certification.
I'm happy to look into it.
ISO17799 is a code of practice for information security. BS7799:2 is a
standard specification for information security management systems (ISMS).
You CAN achieve certification against BS7799:2. In order to be awarded a
certificate, a BS7799 assessor will audit the ISMS. The assessor cannot also
be a consultant. There are very strict rules about this. The assessor will
work for a Certification Body (such as Det Norske Veritas and BSI Assessment
Services Limited).
Hope this helps.
John
_____
----------------------------------------------------------------------------
----
This e-mail message and its attachments are subject to the disclaimer
published at the following website of Deloitte :
http://www.deloitte.com/nl/disclaimer
