Security Standards

17.4 Summary

The infromation assurance professionals’ world standards have a vital role to play. They allow the security professional to speak with a common language. They also facilitate in the specification and development of security solutions to problems by providing a common set of components and processes that allow for reproducibility and function to increase confidence. BS7799 and ISO17799 approach security from an organisational perspective, while the CC approach security from a technical perspective. Together they attempt to provide an integrated solution to the security problem.