Security

Ask something
Discussion Locked

ISO17799 Toolkit Implementation

0 helpful
3 replies

by infosecmn

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Has anyone implemented the ISO17799 Toolkit. Were the questionnairs/checklist/policies etc. valuable, could they be used immediately or did they require lots of customization. I know there is no cookie cutter approach but I would like to know if the toolkit is a good approach or if doing the pieces individually make more sense.

3 replies

by gadgetgirl

This ISO has now changed to 27001, and has changed drastically, insofar as it is now written in English, not gobbledygook! There is a conversion tool, though, on the BSI website (www.bsi.org)

The questionnaires were invaluable, and didn't need tweaking; the checklists don't apply to everyone, but covered many basics, and could be built upon. The policies are totally different, and need to be customised to your own setting. Reading them does give you the right idea though, and gives you something to aim at.

Doing the pieces individually makes more sense if it is a small company; however, the toolkit would be the only way to go on corporates over around the 2000 employee mark - individualising for that many people would make for an awful lot of paperwork for yourself.

Please peer mail me if you need specifics on this, I've done 7799 once, and am about to do it again (for my sins!)

This discussion is closed to new replies.