Security Standards

Security management standards are distinct set of information security guidelines that consist of processes, procedures and training that assist security personnel in implementing the right set of security controls. Security controls enable organisations manage, and protect their computer, information and network services and resources. An information security management standard should be carefully evaluated vis-à-vis the organisations security requirements where the standard will be implemented before a choice is made on which information management standard is chosen.

Improper implementation or selection of an inappropriate information management standard can have significant implication to the assets in which it aims to protect. Security controls consists of mechanisms that provide guidance to connections seeking access to information assets, such as authentication, authorisation and auditing. For full details on security standards contact the author - Cyril.