References:
ISO20000: Section 6.6: Information security management
Comments:
The requirements included in ISO20000 are not as stringent and detailed as the requirements in ISO27001/17799 since they are looking at a more general approach to security management. If you are already certified to ISO27001/17799 then you need not take any action in this area.
Supporting PCAP Documents available in the SHOP:
1: Information Security Manager Job Description
2: Information Security Administrator Job Description
3: Secure Data Data Management Service Description
4: ISMS - Information Security Management System Framework Design
5: ISMS Document Format Standard
6: ISMS Development and Change Procedure
7: ISMS Management System Review Procedure
8: ISMS Security Audit Procedure
9: ISMS Control of Security Records Standard
10: ISMS Security Risk Assessment and Planning Procedure (Implementation)
11: ISMS Security Threat Risk Management Procedure (Steady State)
12: Security: Physical Access Control Procedure
13: Security: Controlled Data Access Control Procedure
14: Security Incident Management Procedure
15: Security: Lost/Stolen Equipment Procedure
16: ISO20000 Security Threat Risk Management Procedure
17: Configuration: Major Information Assets Management Procedure
18: Classification and Labelling of Information Assets Standard
Visit the PCAP Store for Freeware and Demo Documents: http://pcap.co.uk
Visit the Information Security Management Shop Area: Click Here
Visit the ISO20000 Shop Area: Click Here
Last edited on Wed May 21st, 2008 08:15 am by bobmckean
|
