Timeline for What is a similar security standard to ISO 27001 with more focus on IT security? [closed]
Current License: CC BY-SA 3.0
15 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Mar 8, 2017 at 11:59 | comment | added | Rory Alsop♦ | Have you looked into the ISF standard of good practice? Or the NIST guidelines? | |
| Mar 8, 2017 at 11:36 | review | Reopen votes | |||
| Mar 8, 2017 at 12:10 | |||||
| Mar 8, 2017 at 11:20 | history | edited | user2514224 | CC BY-SA 3.0 |
added 421 characters in body; edited title
|
| Mar 8, 2017 at 7:04 | history | closed |
Purefan Steve D.W. Xander CaffeineAddiction |
Opinion-based | |
| Mar 7, 2017 at 21:03 | comment | added | schroeder♦ | @user2514224 then you might need to survey your customers for which standards they A) recognise and value, and B) which of those provide actionable guidelines. Most standard, though, are about helping the business align security to the business goals, and do not dictate what needs to be done. Hence, the need for at least a consultant to marry the goals with the guidelines of the standard to create something actionable. | |
| Mar 7, 2017 at 18:07 | comment | added | user2514224 | @schroeder "The only real driver for our ISO standard is its appeal and recognition to our customers". Our ideal would be a security standard that has some industry recognition that includes actual basic cyber security recommendations and is less bureaucratic than ISO 27K. | |
| Mar 7, 2017 at 16:26 | comment | added | schroeder♦ | You don't explain what you want the standard to do for you. Do you want a set of guides that you can use as a replacement for a qualified InfoSec professional? Are you asking for a set of action items to do to secure your company? Do you want a vanity plate to post on your website to attract customers? | |
| Mar 7, 2017 at 15:47 | answer | added | Felix | timeline score: -1 | |
| Mar 7, 2017 at 13:26 | answer | added | Lie Ryan | timeline score: 1 | |
| Mar 7, 2017 at 13:23 | answer | added | iwaseatenbyagrue | timeline score: 1 | |
| Mar 7, 2017 at 13:21 | answer | added | M'vy | timeline score: 17 | |
| Mar 7, 2017 at 12:44 | review | Close votes | |||
| Mar 8, 2017 at 7:04 | |||||
| Mar 7, 2017 at 12:33 | comment | added | Purefan | Sounds like you're expecting an apple tree to give you oranges. To me, it looks like you want a vulnerability assessment/pentest, which is a different scope and purpose from 27001. Have you checked Offensive Security ? | |
| Mar 7, 2017 at 12:19 | review | First posts | |||
| Mar 7, 2017 at 13:01 | |||||
| Mar 7, 2017 at 12:18 | history | asked | user2514224 | CC BY-SA 3.0 |