Security Management Standard - ISO 17799/BSS7799
M. J. Kenning · Institution of Engineering and Technology eBooks · 2002
Security is more than using the right technology. In the words of cryptographer Bruce Schneier: 'If you think technology can solve your security problems, then you don't understand the problems and you don't understand the technology'. Security is as much about people, and the way they use the technology. The information security management standard BS 7799 addresses this very issue. BS 7799 was developed in the early 1990s as a result of demand from industry, government and commerce for a common information security framework. Organisations felt that they needed to assure those with whom they do business that they operate to a common minimum security standard. They also needed to be able to provide others with assurances about their own security.