• BS 7799-2:2002

    Superseded A superseded Standard is one, which is fully replaced by another Standard, which is a new edition of the same Standard.

    Information security management Specification with guidance for use

    Available format(s):  Hardcopy, PDF

    Superseded date:  18-10-2005

    Language(s):  English

    Published date:  05-09-2002

    Publisher:  British Standards Institution

    Add To Cart

    Table of Contents - (Show below) - (Hide below)

    Committees responsible
    Foreword
    0 Introduction
    1 Scope
    2 Normative references
    3 Terms and definitions
    4 Information security management system
    5 Management responsibility
    6 Management review of the ISMS
    7 ISMS improvement
    Annex A (normative) Control objectives and control
    Annex B (informative) Guidance on use of the standard
    Annex C (informative) Correspondence between BS EN ISO
            9001:2000, BS EN ISO 14001:1996 and BS 7799-2:2002
    Annex D (informative) Changes to internal numbering
    Bibliography

    Abstract - (Show below) - (Hide below)

    Describes the requirements for establishing, implementing, operating, monitoring, reviewing, maintaining and improving a documented ISMS within the context of the organization's overall business risks.

    General Product Information - (Show below) - (Hide below)

    Committee IST/33
    Development Note Also available as part of KIT 20 Supersedes BS 7799-2(1999) and 01/682010 DC (09/2002)
    Document Type Standard
    Publisher British Standards Institution
    Status Superseded
    Superseded By

    Standards Referenced By This Book - (Show below) - (Hide below)

    BS 7858:2004 Security screening of individuals employed in a security environment. Code of practice
    PD 0026:2003 Software and systems quality framework. A guide to the use of ISO/IEC and other standards for understanding quality in software and systems
    BS 15000-1:2002 IT service management Specification for service management

    Standards Referencing This Book - (Show below) - (Hide below)

    BS ISO/IEC TR 13335-4:2000 Information technology. Guidelines for the management of IT security Selection of safeguards
    ISO/IEC Guide 62:1996 General requirements for bodies operating assessment and certification/registration of quality systems
    BS EN ISO 9001:2015 Quality management systems. Requirements
    BS 7799-2:1999 Information security management Specification for information security management systems
    BS EN ISO 14001:2015 Environmental management systems. Requirements with guidance for use
    BS ISO/IEC 17799 : 2005 INFORMATION TECHNOLOGY - SECURITY TECHNIQUES - CODE OF PRACTICE FOR INFORMATION SECURITY MANAGEMENT
    ISO/IEC Guide 73:2002 Risk management Vocabulary Guidelines for use in standards
    BS ISO/IEC TR 13335-3:1998 Information technology. Guidelines for the management of IT security Techniques for the management of IT security
    • Access your standards online with a subscription

      Features

      • Simple online access to standards, technical information and regulations
      • Critical updates of standards and customisable alerts and notifications
      • Multi - user online standards collection: secure, flexibile and cost effective