From Wikipedia, the free encyclopedia.
ISO 17799 is an information security standard, based upon an earlier text known as BS7799. It was published by ISO in December 2000.
In 2002, a related standard, BS7799-2, was published. Whereas ISO 17799 (equivalent to BS7799-1) is a code of practice for information security, BS7799-2 covers Information Security Management Systems (ISMS). It is the latter against which certification is currently available.
Both these standards are now globally recognized, with a certification system against the second well established.
