Abstract
To protect the information assets of organizations, many different standards and guidelines have been proposed. Among them, International standard ISO 17799 is one of the most prominent international efforts on information security. This standard provides both an authoritative statement on information security and the procedures to be adopted by organizations to ensure information security. Security professionals claim ISO 17799 to be a suitable model for information security management and an appropriate vehicle for addressing information security management issues in the modern organization. However, to our knowledge, no empirical studies have been conducted to validate this standard. Based on a survey of information security professionals, we found that ISO 17799 is comprehensive, but not parsimonious.
DOI
10.17705/1CAIS.01532
Recommended Citation
Ma, Q., & Pearson, J. (2005). ISO 17799: "Best Practices" in Information Security Management?. Communications of the Association for Information Systems, 15, pp-pp. https://doi.org/10.17705/1CAIS.01532
When commenting on articles, please be friendly, welcoming, respectful and abide by the AIS eLibrary Discussion Thread Code of Conduct posted here.
