Category Archives: ISO 17799 Security

ISO 17799 Security, security policy management

Effective Security Policy Management – Part 1

Posted on by David Lineman
How mature is your information security policy program? Do you have a set of outdated documents stored in a binder or intranet site? Or do you have a documented management program that keeps your policies up to date, your users informed and your internal auditors sleeping at night? This is the first article in the [...]
Continue reading →
ISO 17799 Security, ISO 27002 Compliance

COBIT or ISO17799?

Posted on by David Lineman

Many organizations just getting started with information security policies ask us the question: Should we use ISO 17799 (now ISO 27002) or COBIT? The answer, of course, is that it depends on what you are trying to accomplish. In fact, they are not mutually exclusive, but can be used together. The basic difference between COBIT […]

Continue reading →