In this resource guide get details, tips and resources on ISO 17799 and ISO/IEC 27002 certification, including auditing and compliance, standards, guidelines, implementation
Security building blocks with ISO 17799 TIP - Get insights on ISO 17799's strengths and weaknesses, and receive practical advice on how to apply the standard in your own enterprise.
IT auditing applications and tools for ISO 27002 certification
22 Apr 2009 EXPERT ANSWER - Gaining ISO 27002 certification can be a daunting process, so what auditing tools can help? David Mortman weighs in on how to choose the best auditing tool for your organization.
Is the Orange Book still relevant for assessing security controls?
06 Oct 2008 EXPERT ANSWER - Is the Orange Book still the be-all and end-all for assessing security controls in the enterprise? Security management expert Mike Rothman explains what happened to the Orange Book, and the Common Criteria for Information ...
How do ISO 17799 and SAS 70 differ?
19 Feb 2008 EXPERT ANSWER - ISO 17799 and SAS 70 are two different policies that help organizations achieve compliance best practices. In this Q&A, Mike Rothman defines the policies and unveils the their differences.
Security survey finds increase in security standards adoption
SearchSecurity.com | 30 Oct 2008 ARTICLE - Ernst & Young's 2008 Global Information Security Survey finds both positive and negative trends in information security depending on how you look at the numbers.
A CISO's lessons in building a security plan
SearchSecurity.com | 16 Jan 2006 ARTICLE - The man in charge of information security at a Massachusetts insurance company explains how he built up the company's IT defenses from the top down.
Competing regulations clog road to compliance
SearchSecurity.com | 20 Oct 2005 ARTICLE - It's difficult for companies to cope with today's multitude of compliance regulations, but an expert at Information Security Decisions said security frameworks may be the answer.
Regulatory Compliance and ISO 27001
IT Governance Ltd. | 11 May 2006 BOOK CHAPTER - In this excerpt from "The Case for ISO 27001," author Alan Calder explains how infosec pros can use ISO 27001 to comply with complex and overlapping regulatory requirements.
Management Support
IT Governance Publishing | 13 Apr 2006 BOOK CHAPTER - In the excerpt from "Nine Steps to ISO 27001 Success: An Implementation Overview," Alan Calder explains the first key to ISO 27001 success and what it takes to set up for success.
GRC: Over-Hyped or Legit?
Information Security Magazine | 01 Sep 2008 COLUMNS - Governance, risk and compliance (GRC) is being used as a catch-all phrase for most information security strategies and tagged onto various products, adding even more confusion in the market as to what it truly means or ...
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.
