UK's security code of practice becomes worldwide standard

The UK's code of practice for information security management, BS 7999 part I, has been adopted as an international standard by the International Standards Organisation.

Bill Goodwin

The international version of the code of practice, ISO 17799 will allow companies to identify gaps in their security management, and will provide a common benchmark for security best practice.

Since it was first published in 1995, BS 7799 part I has been taken up by thousands of organisations worldwide, said Ted Humphreys chairman of the ISO 17799 working group.

Uptake of part II, which allows companies to obtain BS 7799 certification, has been less impressive, however, with fewer than 40 companies in the UK obtaining certification.

Discussions are underway on whether part II should become an international standard, said Humphreys.

bill.goodwin@rbi.co.uk