Information Security Stack Exchange is a question and answer site for information security professionals. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I would like to ask about how can someone adopt certain security model in the organizations what are the criteria that controls how I can pick the best security model for my organization

For example I have set up an security services (pentest- vulnerability assessment- secures network desing) and security training org. I want to adopt on the Ifo. Sec. mngt. model but I don't know what should I look for when choosing the proper model.


share|improve this question

closed as too broad by Gilles, Xander, NULLZ, TildalWave, Adi Oct 21 '13 at 9:09

There are either too many possible answers, or good answers would be too long for this format. Please add details to narrow the answer set or to isolate an issue that can be answered in a few paragraphs.If this question can be reworded to fit the rules in the help center, please edit the question.

I think this a very broad topic and I would recommend some professional information security and assurance training to begin with. – Ali Ahmad Oct 20 '13 at 13:09
Is your questionmark key broken? – NULLZ Oct 20 '13 at 16:22
I got the answer for my question and I accepted it.....isn't that enough guys? – user2309720 Oct 22 '13 at 4:30
up vote 2 down vote accepted

I would suggest that you have a look at the ISO27000 series - these documents act as a framework for information security.

share|improve this answer
While I believe your post does answer the question directly, I would suggest that you may do the following to improve it: 1. Provide reference URLs. 2. Provide a background of the ISO 27000 series. 3. Generally it is recommended to offer more than one option as a solution, therefore suggesting stadards apart from the ISO 27' would be good. – Rohan Durve - Decode141 Oct 20 '13 at 12:31
I had doubt about the ISO 27K series whether is it considered as a security model or not..but seems it's true that ISO 27K is also a security model..coz I read the CW and the BS 7799 and others but I felt lost..when I read the ISo 27K I felt what it says is digestible..thus I will just go for the ISOK series..thanks a bunch dude @KingJohnno – user2309720 Oct 20 '13 at 14:23
@RohanDurve-Decode141 Google ISO 27K series and you will got a website describing all the series it helps me a lot buddy – user2309720 Oct 20 '13 at 14:27

Not the answer you're looking for? Browse other questions tagged or ask your own question.