SafeComs – Network Security, Business Continuity, Regulatory Compliance


	Sarbanes-Oxley

	ITIL/COBIT/COSO (Compliance Frameworks)

Welcome to Safecoms !!!

Home > Our Services >

Regulatory Compliance >

BS-7799 / ISO-17799

Information is an asset which, like other important business assets, has value to an organization and consequently needs to be suitably protected. Information security protects information from a wide range of threats in order to ensure business continuity, minimize business damage and maximize return on investments and business opportunities.

Information security is characterized here as the preservation of:

	Confidentiality: ensuring that information is accessible only to those authorized to have access;
	Integrity: safeguarding the accuracy and completeness of information and processing methods;
	Availability: ensuring that authorized users have access to information and associated assets when required.

The expert teams at SafeComs can guide you through the requirements of these standards:

ISO/IEC 17799 Information technology -
Code of practice for information security management
ISO/IEC 17799 gives recommendations for information security management for use by those who are responsible for initiating, implementing or maintaining security in their organization. It is intended to provide a common basis for developing organizational security standards and effective security management practice and to provide confidence in inter-organizational dealings.

BS 7799-2 Specification for information security management systems
This standard gives recommendations for information security management for use by those who are responsible for initiating, implementing or maintaining security in their organization. It is intended to provide a common basis for developing organizational security standards and effective security management practices and to provide confidence in inter-organizational dealings.

The sections of BS7799-2 include:

	Security policy
	Security organization
	Asset classification and control
	Personnel security
	Physical and environmental security
	Communications and operations management
	Access control
	Systems development and maintenance
	Business continuity management