Information security management: Why standards are important

Information Management and Computer Security

Volumn 7, Issue 1, 1999, Pages 50-57

  Von Solms, Rossouw ^a  

^a NELSON MANDELA METROPOLITAN UNIVERSITY   (South Africa)

Author keywords

Certification; Computer security; Data security; Evaluation; Information management; Standards

Indexed keywords

EID: 0001897127     PISSN: 09685227     EISSN: None     Source Type: Journal    
DOI: 10.1108/09685229910255223     Document Type: Article

References (5)

1. British Standards Institute (1993), BS 7799: Code of Practice for Information Security Management (CoP), PD0003, British Standards Institute, UK.
2. Department of Defense (DoD) (1985), Department of Defense Trusted Computer System Evaluation Criteria (TCSEC), Washington, DC.
3. European Computer Manufacturers Association (1993), Secure Information Processing versus the Concept of Product Evaluation, ECMA TR/64, December.
4. Information Technology Security Evaluation Criteria (ITSEC) (1990), Harmonised Criteria of France, Germany, The Netherlands and the United Kingdom.
5. ISO/IEC (1996), Guidelines to the Management of Information Technology Security, TR 13335.