Information Security--new standard for 2005.With organisations facing increasing risks and pressures from corporate governance Corporate Governance The relationship between all the stakeholders in a company. This includes the shareholders, directors, and management of a company, as defined by the corporate charter, bylaws, formal policy, and rule of law. legislation, the Information Security Forum (ISF ISF - Information Systems Factory ) has announced the latest version of its international industry benchmark, the Standard of Good Practice for Information Security. The updated 2005 version is freely available and is the only detailed and comprehensive global standard that allows organisations to manage the full range of threats and improve levels of information security. The ISF 2005 Standard of Good Practice pays particular attention to current issues such as secure instant messaging Exchanging text messages in real time between two or more people logged into a particular instant messaging (IM) service. Instant messaging is more interactive than e-mail because messages are sent immediately, whereas e-mail messages can be queued up in a mail server for seconds or , web server security, patch management and virus protection as well as important and changing areas of information security including information risk management, outsourcing, privacy and the disappearance of the network boundary. Compiled by some of the world's leading independent experts in information security, the Standard is based on over 16 years and $75million of investment in practical research. The Standard draws on the knowledge and experiences of the ISF's 270 global members--including 50% of the Fortune 100--as well as building on other standards such as ISO (1) See ISO speed. (2) (International Organization for Standardization, Geneva, Switzerland, www.iso.ch) An organization that sets international standards, founded in 1946. The U.S. member body is ANSI. 17799 and COBIT (Control OBjectives for Information and related Technology) A business-oriented set of standards for guiding management in the sound use of information technology from the Information Systems Audit and Control Association (ISACA) (www.isaca.org). . www.securityforum.org |
|
||||||||||||||||||
Printer friendly
Cite/link
Email
Feedback
Reader Opinion