Preview

I.S. 17799-2:2002

Superseded

View Superseded by

Preview

INFORMATION SECURITY MANAGEMENT - PART 2: SPECIFICATION FOR INFORMATION SECURITY MANAGEMENT SYSTEMS

Available format(s)

Hardcopy , PDF

Superseded date

22-08-2006

Language(s)

English

Published date

01-01-2002

Publisher

National Standards Authority of Ireland

Preview

Foreword
Declaration
0 Introduction
1 Scope
2 Normative references
3 Terms and definitions
4 Information security management system
5 Management responsibility
6 Management review of the ISMS
7 ISMS improvement
Annex A (normative) Control objectives and controls
Annex B (informative) Guidance on use of the standard
Annex C (informative) Correspondence between I.S. EN
ISO 9001:2000, I.S. EN ISO 14001:1996 and I.S.
17799-2:2002
Annex D (informative) Changes to internal numbering
Bibliography

Describes requirements for establishing, implementing and documenting information security management systems (ISMSs). Also specifies requirements for security controls to be implemented according to the needs of individual organizations.

DocumentType	Standard
Pages	39
PublisherName	National Standards Authority of Ireland
Status	Superseded
SupersededBy	ISO/IEC 27001:2013

ISO/IEC Guide 62:1996	General requirements for bodies operating assessment and certification/registration of quality systems
I.S. EN ISO 9001:2015	QUALITY MANAGEMENT SYSTEMS - REQUIREMENTS (ISO 9001:2015)
I.S. ISO/IEC 17799:2001	INFORMATION TECHNOLOGY - CODE OF PRACTICE FOR INFORMATION SECURITY MANAGEMENT
ISO/IEC Guide 73:2002	Risk management Vocabulary Guidelines for use in standards
ISO/IEC TR 13335-3:1998	Information technology Guidelines for the management of IT Security Part 3: Techniques for the management of IT Security
ISO/IEC TR 13335-4:2000	Information technology Guidelines for the management of IT Security Part 4: Selection of safeguards
I.S. EN ISO 14001:2015	ENVIRONMENTAL MANAGEMENT SYSTEMS - REQUIREMENTS WITH GUIDANCE FOR USE (ISO 14001:2015)