Information security management standards: Problems and solutions

摘要: International information security management guidelines play a key role in managing and certifying organizational IS. We analyzed BS7799, BS ISO/IEC17799: 2000, GASPP/GAISP, the SSE-CMM to determine compare how these are validated, widely they can be applied. First, we found that GASPP/GAISP were generic or universal scope; consequently do not pay enough attention differences between organizations fact their requirements different. Second, noted validated by appeal common practice authority this was sound basis for important international guidelines. To address shortcomings, believe should seen as library of material on practitioners.