Modifications in the Latest Edition of the BS 7799 Standard

Abstract

In the paper, the information security standard BS 7799 is described. A short history of the standard is presented. Benefits of standard implementation into an organization are highlighted. Modifications in the latest versions of the standard (BS ISO/IEC 17799:2005 and BS ISO/IEC 27001:2005) are described in detail. The authors also discuss possible impact of these modifications on the organizations that have developed their information security management systems (ISMS) on the basis of the previous versions of the standard. Besides, the article describes what the organizations can expect in the field of the information security standardization in the near future. Keywords: information security, BS 7799 standard, new edition, modifications, impact on the organizations, future of the standard