Article ID Journal Published Year Pages File Type
456632 Computers & Security 2006 7 Pages PDF
Abstract

ISO/IEC 17799:2005 is one of the leading standards of information security. It is the code of practice including 133 controls in 11 different domains. There are a number of tools and software that are used by organizations to check whether they comply with this standard. The task of checking compliance helps organizations to determine their conformity to the controls listed in the standard and deliver useful outputs to the certification process. In this paper, a quantitative survey method is proposed for evaluating ISO 17799 compliance. Our case study has shown that the survey method gives accurate compliance results in a short time with minimized cost.

Related Topics
Physical Sciences and Engineering Computer Science Computer Networks and Communications
Authors
, ,