ISO-17799 – Standard for Information Security: A Welcome Boon for Security Management and Audit
Lawrence Capuder · EDPACS · 2004
Imagine — no, fantasize — as an IT audit security or audit professional that your organization has taken on a dedicated commitment toward information security, its risk assessment, design, implementation, and testing. This commitment is felt by all levels — from the board of directors to senior management, all the way down to the computer console operator. Try to visualize the impact on your job duties and status, and the compliance with major regulatory directives, such as the: Sarbanes–Oxley Act (for publicly financed companies) Health Insurance Portability and Accountability Act (HIPAA) (for organizations dealing with health issues) Gramm–Leach–Bliley Act (for financial institutions)