The benefits of an Information Security Management ... - OpenMPE

More documents

Recommendations

Info

BS 7799 • Derived from ISO 17799 • Specification for designing, documenting and implementing an ISMS – more important than controls • Basis for certification 30
Case study - HP Managed Services EMEA • Why obtain certification? − Customer demand − Reduce internal cost of managing security • Advantages − Adapt ISMS as the security plan for all delivery centers − Incorporate BS 7799 requirements into performance measurements • Difficulties − Fit already existing model into BS 7799 framework − Define a clear scope • Future − Certify all delivery centers 31
Page 1 and 2: IT Governance: The benefits of an I
Page 3 and 4: Agenda • What is an Information S
Page 5 and 6: 5 So Many Corporate Assets, So Litt
Page 7 and 8: Plan-Do-Check-Act Process Model (PD
Page 9 and 10: Security Organization • Appropria
Page 11 and 12: Risk Assessment • No one mandator
Page 13 and 14: What is an ISMS? • Framework to m
Page 15 and 16: Security Policy • Ensure support
Page 17 and 18: Asset Classification & Control •
Page 19 and 20: Physical and Environmental Security
Page 21 and 22: System Access Control • The exist
Page 23 and 24: Business Continuity Planning (BCP)
Page 25 and 26: ISO17799 Control Domains
Page 27 and 28: Do’s • Plan before doing • Li
Page 29: Commercial tools • CobiT − Cont
Page 33 and 34: Summary • ISMS is a framework for
Page 35 and 36: Bibliography • IT Governance: Dat

The benefits of an Information Security Management ... - OpenMPE

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?