Businesses around the world are waiting for an international standard that addresses the problem of how to ensure that their information systems are managed and used in a secure way. Over the last decade, a standard has emerged and is in the process of meeting this business need. This standard or code of practice is known as the British Standard 7799. It is issued in two parts: the Code of Practice for Information Security Management and the Specification for Information Security Management Systems.
See Also: System Administration Theory.
Humphreys, T. Finding a Language to Address Information Security Management. [Online, December 2000.] ISO Bulletin Website. http://www.iso.ch/iso/en/ commcentre/pdf/ISMlanguage0012.pdf.