The ISO 27000 series is a set of individual standards and documents
defined as follows:
·
ISO 27001 - The specification for an
Information Security Management System (ISMS) replaced the BS7799-2
standard.

·
ISO 27002 – The ISO 27002 standard is a
renaming of the ISO 17799 standard, which is a code of practice for
information security. It outlines controls and control mechanisms,
which may be implemented subject to the guidance provided within ISO
27001.

·
ISO 27003 – This is a PROPOSED Standard,
which has yet to be completely defined. This will be the official
number of a new standard intended to offer guidance for the
implementation of an ISMS (Information Security Management System). The
purpose of this proposed development is to provide help and guidance in
implementing ISMS. This will be a quality control standard when it is
released. ISO 27003 will focus on utilizing the Plan-Do-Act-Check (PDCA)
method, when establishing, implementing, reviewing, and improving the
ISMS.

·
ISO 27004 - This is the designated number
for a PROPOSED standard covering information security, system
management, measurement, and metrics.
·
ISO 27005 – This is the name of a PROPOSED
standard emerging standard covering information security risk
management. As with the other standards within the ISO 27000 series, no
firm dates have been established for its release. However, it will
define the ISMS risk management process, including identification of
assets, threats and vulnerabilities. This is the ISO number assigned
for an emerging standard for information security risk management.
·
ISO 27006 - This standard offers guidelines
for the accreditation of organizations that offer certification and
registration with respect to ISMS.

Disaster Planning/Business Continuity and Security Auditing News
05/09/2008 - Availabe Consultants Excellent IT Audit/Sox/Information Security ...
... Risk Assessment & Management, Designing of Security Policies & Procedures, ITIL/ITSM audit/implementation, developing Business Continuity Plans (BCP), Disaster Recovery procedures (DRP) and ISO17799/ISO 27001 Consulting. ...-
more information
05/08/2008 - Opening for Manager-Information Security - Bangalore - MNC Bank
BCP/DRP: · Ensure ISMs test/coordinate the disaster recovery activity in an event of a disaster. · Review the Business Continuity Process inline with Resource Management support · Track & Publish Change Management process across BUs ...-
more information
05/08/2008 - {c2c-jobs-usa} URGENT REQUIREMENT FOR UNIX ADMIN LOCAL PREFERRED
Scripting experience, H/W (p series, x series), partitioning & virtualization, software and hardware upgrade and AIX security. · Experience with Sarbanes-Oxely and audit compliance, disaster recovery, remote access configuration and ...-
more information
05/07/2008 - Tealeaf Introduces cxResults - Advanced Customer Behavior Analysis
Centralized Management: As the web becomes the primary vehicle for doing business and demands on sites increase, CX includes centralized management tools for configuration rollback, audit and security, and disaster recovery.-
more information
05/06/2008 - Product Manager, Head of Managed IT Services - Church ...
Product Manager, Head of Managed IT Services... managed IT office, Disaster Recovery, BCP etc). The Product Manager, Head of Managed IT Services must have... (From CityJobs.com)-
more information
05/05/2008 - Board of Trustees Meeting May 12-14
(Committee on Audit) Audit topics include:. Information Security: review of the systems in place to protect the confidentiality, integrity, and access/availability of information including systems to limit collection of information, ...-
more information
04/29/2008 - IT Auditing - Certified Information System Auditor - YI.Auditor
Candidates for a CISA certification must pass the examination, agree to adhere to ISACA’s Code of Professional Ethics, submit evidence of a minimum of five years of professional IS auditing, control, or security work, and abide by a ...-
more information
04/29/2008 - IT Supervisor
Following the network standards and security controls to ensure audit security compliance and controls; 4. Assists in the design, implementation and maintenance of system; 5. Inventory management of software licenses, software, ...-
more information
04/26/2008 - Improvements needed in controls over high school diplomas: Audit ...
A state audit of the Jackson County School Board finds that it needs to improve internal controls over high school diplomas; develop a cell phone policy for employees; add to its disaster recovery and security controls for information ...-
more information
04/24/2008 - IT Auditing: Information Technology Audits (2007)
... Infrastructure Controls - Infrastructure Controls: Security - Infrastructure Controls: Communications - Business Process Controls - System Development - Business Continuity Planning and Disaster Recovery - Usinf Software to Audit ...-
more information
04/24/2008 - 8 Years Left to Prototype Disaster Recovery for 2016 Confirmed ...
Here you will get software to help with BIA and risk analysis, as well as links to tools/services to help you create, maintain and audit the plan itself. Whether you are entirely new to business continuity and disaster recovery planning ...-
more information
04/11/2008 - Business Continuity Market Comes of Age as 2008 Event better than ever
The conference & exhibition attracted 2457 visitors (pre- ABC audit) from top level positions across a wide range of industries including local government, the forces, pharmaceutical, finance, telecoms and aerospace. ...-
more information
04/11/2008 - Network Engineer in Richmond VA
Monitor intrusion detection devices and adjust intrusion parameters to fine tune alerts in conjunction with TAX IT Security Audit. Apply or assist in applying Win2K and UNIX security related standards and patch levels that lock-down the ...-
more information
04/11/2008 - IT Audit Specialist
Performs control reviews on systems development operation, programming, security procedures and standards in support of internal and external audits. • Reviews system backup disaster recovery and maintenance procedures and ...-
more information
04/08/2008 - The Financial Controller
Define and manage Unix architecture infrastructure development, administration, monitoring, maintenance and security. • Prepare, produce and manage disaster recovery policies, procedures, test plan and jobs of Centralized Data Storage ...-
more information
04/08/2008 - Conventional Awarneness
To ensure that these issues were addressed, there are five sections on the questionnaire, which includes Risk Assessment, Operations Security & Risk Management, Audit/Independent Review Program, Disaster Recovery/ Business Continuity ...-
more information
04/03/2008 - Security Blueprint
What Is All This Integrity Business? * How to get employees passionate about disaster recovery * Backups: Understanding How Performance Matters * Top 10 Security Trends for 2008 * Learn Best Practices for Database Auditing. and more. ...-
more information
03/30/2008 - Security standards: a stitch in time
Considering the fact that most organisations have to undergo a mandatory surveillance/review audit on a quarterly or half-yearly basis, it is just a matter of months before existing BS 7799-2 certificates undergo the transition ...-
more information
03/27/2008 - Latest Information Security News Roundup
Audit reaffirms need for more IT staff at OU http://www.athensmessenger.com/main.asp?SectionID=1&SubSectionID=273&ArticleID=9229. COMMENTARY. Mozilla CEO blasts Apple for putting security of the internet at risk ...-
more information
03/27/2008 - Physical Security and Information Management
Still other services hybridize with our RSA technology to secure these recordings, and provide audit trails around how they were used, and by who. The trends are pretty clear to me, though. There's going to be a lot more of this kind of ...-
more information
03/17/2008 - Senior IT Security Executive - ISMS
Perform DRP assessment - To conduct IT Risk assessment and management - Responsible for IT Security awareness and training - To prepare and review assessment reports, as well as present assessment findings with recommendations to the ...-
more information
03/15/2008 - Disaster Recovery Plan For Your Business?
We are always trying to improve our disaster recovery plan in case a serious problem occurs that could disrupt the normal working service that we provide. In situations like : flooding, fire, serious computer malfunction, IT security ...-
more information
03/11/2008 - Systems Development Lifecycle (SDLC)
System accreditation is usually supported by a technical or security evaluation (or both), risk assessment, contingency plan, audit, and acknowledged policies of acceptable user behavior. Reaccreditation should occur after any ...-
more information
02/26/2008 - IT Manager: Banking/Information Security/Disaster Recovery/Audit
Location: Minneapolis,MN Source: Jobs.net.-
more information
12/01/2007 - IT Spending Falls - Is a Recession Ahead
Audit (IDG News Service) -- The outlook for IT spending in the new year is "unusually bad," according to ChangeWave Research LLC, which said its latest quarterly tracking survey of corporate users shows that an increasing number of ...-
more information
|
|