Using Reflex Disknet Pro to Aid Compliance with BS 7799 & ISO/IEC ...

Introduction
Just like any other business asset information has a value, and consequently we
should as organisations look at protecting that most valuable of assets. Having a
recognised standard to work toward is both desirable and effective. Since compliance
with a recognised standard will clearly identify to others that you have seriously
considered the subject in question. The ISO (International Organisation for
Standardisation) and the IEC (International Electrotechnical Commission) form the
specialised system for worldwide standardisation. Numerous national bodies make
up the membership of these organisations developing and publishing internationally
recognised standards. Gaining accreditation of BS 7799 or ISO/IEC 17799:2000 is
fast becoming the accepted minimal standard for Information Security.
More and more companies are demanding that their suppliers and partners become
compliant, thereby indicating that they have taken credible steps to implement
information security. Why is information security required and what is causing so
many organisations to sign-up to this standard? Confidentiality, integrity and
availability of information are probably the main drivers, which are directly linked to
competitive edge, cash-flow, profitability, legal compliance and not least commercial
image.
Executive Overview
Since BS 7799 was converted into the international standard ISO/IEC 17799:2000 it
has become almost a prerequisite when implementing information security. This
standard or code of practice covers all aspects of IT including such elements as;
Security Policy, Organisational Security, Physical and Environmental Security,
Systems Development and Maintenance and Business Continuity Management.
The standard is divided into twelve main sections, each section sub-divided to allow
all aspects of this vast subject to be considered. For any organisation either looking
to implement this standard or for those that have already attained accreditation and
require to remain compliant, Reflex Disknet Pro offers a software solution that will
enforce policy in six of the twelve main areas:
• Asset classification and control
• Physical and environmental security
• Communications and operations management
• Access control
• Systems development and maintenance
• Compliance
Investment in information security and it’s formal acknowledgement via ISO 17799
accreditation is not to be taken lightly. Notwithstanding the benefits already
described above, any product which is capable of offering support of this standard
whilst in itself providing further benefits in enforcing policy and security in a uniformed
and manageable way, is worthy of consideration. The remaining pages of this
document illustrate how Reflex Disknet Pro delivers just that.
© Reflex Magnetics Ltd 4