DR 95305

Proposes recommended requirements, procedures and controls for information systems design, implementation and operation to safeguard every organization's information resource from external and internal security threats, either accidental or intended. It includes a comprehensive list of terms relating to information security. It is primarily intended as a reference document by personnel responsible for implementing and maintaining information security. It has been adapted from BS 7799 and includes appendices with legislation relevant to Australia and New Zealand as well as guidelines and principles from the Organization for Economic Co-operation and Development (OECD). Proposed as a Joint Australian/New Zealand Standard.