Under the aegis of the Joint Information Systems Committee (JISC) JISC
Assist has recently held a workshop to discuss the possibility of a generic
IS policy based on BS7799 the CoP on Infornmation Security Management and
the outcome of this workshop will be to hand hopefully in the next two
months. In essence BS7799 covers ten key controls which should be considered
in the formulation of an IS policy for any organisation. I attach these as a
file and hope that the system accepts them as I am new to the mailbase.
<<IT Sec BS7799 Key .doc>>
> -----Original Message-----
> From: John Hawley [SMTP:[log in to unmask]]
> Sent: 18 November 1999 10:11
> To: [log in to unmask]
> Cc: [log in to unmask]
> Subject: Data Security Policy and BS7799
>
> We have been asked if our data security policy confirms to
> BS7799. We have ordered this document and are awaiting
> its delivery.
>
> In the meantime, I should be grateful if someone could
> summarise the key points from BS7799 for us.
>
> Many thanks - John.
>
>
>
> John Hawley
> Deputy Director
> Corporate Information and Computing Services
> University of Sheffield
> 285 Glossop Road
> Sheffield S10 2HB Tel: 0114 222 1133 Fax: 0114 222 1188
|