Difference between BS7799 and ISO17799

[raojagdish]

Hi,

I would like to have some info on the following :
1. Difference between BS7799 and ISO17799
2. The changeover from BS7799 to ISO17799
3. Differnce between IS17799 and ISO27001
4. Differnce between ISO27001 and ISO27002
5. Is it OK if we get certified for ISO27001 and then get a time frame for upgradation. If yes what is the time frame ?

Please let me know if you have any info on the above.

Thanks

Regards

Jagdish

[Biljana]

Hi,
BS 7799 initially consists of two parts, BS 7799-1, which became ISO 17799, and BS 7799-2, which became ISO 27001.

ISO 27001 sets requriements that an organization must fulfill in order to establish an information security management system. This is the standard for certification.

ISO 17799 is the best practices for information security and practically provides guidance on implementation of the security controls that must be chosen on the basis of risk assessment as required in ISO 27001.

There are many web sites talking about this, just do a bit of google search .

[SecAdmin]

Just to update this, ISO 17799 was subsequently renamed to ISO 27002.