Examines the benefits of an information security management system based on BS 7799 as part of an integrated management system. It can significantly help to protect an organization's critical information, as well as demonstrating to others that it takes information security seriously.