Responding to demands from the international community over the last twelve years for best practice and certification of information security management the standards ISO/IEC 17799, the NEW ISO/IEC 27001 (revised version of BS 7799 Part 2:2002 ) and BS 7799 Part 2:2002 have developed and evoIn response to demands from the international community over the last twelve years for best practices and certification for information security management, the standards ISO/IEC 17799, the NEW ISO/IEC 27001 (revised version of BS 7799 Part 2:2002) and BS 7799 Part 2:2002 has been developed and evolved.

The application and use of these standards has been taken up by organizations small, medium and large in many parts of the world as a “common language” for information security management: to ensure business continuity, minimize business damage by preventing and minimizing the impact of security incidents and to maximize business investments and opportunities.lved. The application and use of these standards has been taken up by organizations small, medium and large in many parts of the world as a “common language” for information security management: to ensure business continuity, minimize business damage by preventing and minimizing the impact of security incidents and to maximize business investments and opportunities.