BS7799: A Suitable Model for Information Security Management

摘要

The world is changing rapidly as technology marchesforward and the modern business world expands to takeadvantage of the new technology. Security is seen asfundamental to rapid changing E-business. To satisfy theurgent need for security on the Internet, organisations needto face these challenges and need a suitable managementmodel for information security management.This paper presents the current foundation ofinformation security standard and analyses the frameworkof BS7799 British information security model. Itdescribes the basic properties of the important securitymanagement processes: security policy, security standards,access control, security architecture. It provides anopportunity for security manager to gain securitymanagement knowledge and recognise the importantprocedures and mechanisms to improve the process ofinformation security management.