ISO-IEC 27002-2005 - Information Technology - Security Techniques - Code of Practice for Information Security Management.pdf

BRITISH STANDARD BS ISO/IEC
27002:2005
BS 7799-1:2005
Incorporating
corrigendum no. 1
Information
technology —
Security techniques —
Code of practice for
information security
management
ICS
 

 
BS ISO/IEC 27002:2005
National foreword
This British Standard is the UK implementation of ISO/IEC 27002:2005,
incorporating corrigendum July 2007. It supersedes BS ISO/IEC 17799:2000
which is withdrawn.
The UK participation in its preparation was entrusted to mittee
IST/33, Information technology — Security Techniques.
A list anizations represented on mittee can be obtained on
request to its secretary.
This publication does not purport to include all the necessary provisions of a
contract. Users are responsible for its correct application.
Compliance with a British Standard cannot confer immunity from
legal obligations.
This British Standard was Amendments issued since publication
published under the authority
of the Standards Policy and
mittee Amd. No. ments
on 16 June 2005
17310 31 July 2007 Identifier of standard renumbered from
Corrigendum No. 1 (BS) ISO/IEC 17799 to (BS) ISO/IEC 27002
© BSI 2007
ISBN 978 0 580 59729 9
BS ISO/IEC 27002:2005

INTERNATIONAL ISO/IEC
STANDARD 27002
Second edition
2005-06-15


Information technology — Security
techniques — Code of practice for
information security management
Technologies de l'information — Techniques de sécurité — Code de
pratique pour la gestion de sécurité d'information



Reference number
ISO/IEC 27002:2005(E)
ii
BS ISO/IEC 27002:2005
Contents Page

FOREWORD..................................................................................................................................................... VII
0 INTRODUCTION ..........................................................................................................................