Archive for April, 2007

BS7799:2000 vs ISO 27001:2005

Here is a comparison of the changes that has been made in the new standard. This document gives you a one to one mapping, which is much easier to understand. It is very helpful when organization would like to upgrade from their existing BS7799 implementation.

File Download: Right-click on the link below and select “Save target as”. Once the download is complete, change the extension from “.pdf” to “.xls” and you are ready to go.

2000v2005

Tags: ,

Risks on ISMS Implementation

Objective:
It is always a good practice to identify the risks involved in any implementation process. This is pertaining to the ISMS implementation and I have highlighted 6 points that is critical to this subject. These are based out of my experience and if there is anything more, please feel free to share it with the community.

Read the rest of this entry »

Tags: , ,