ISO 17799 Toolkit

[Gazzil]

Hi all,

I currently maintain the ISO9001 and 14001 accreditations here at work and we are looking to make a start with ISO17799.

I wish to avoid consultants, so I am thinking about buying the ISO17799 toolkit which I stumbled across here.

My questions is, how thorough is this? Does the toolkit give you a good fundamental basis from which to build you standard or is it more of an information pack?

Could you please advise me on how thorough the toolkit is and any other points which will influence my decision to buy it??

Many thanks for your time,

Gary

[SecAdmin]

Gary,

It's an established and widely used product. It's certainly been around for a long time and I've heard no negative vibes.

However, I do know that it is thoroughly described on its own sites, so it's probably best that you take a good look through one of those. You might need a magnifying glass for the graphics though (I think they are deliberately blurred)!



Kate

[Trish]

Hi Gary

We are currently in the process of drafting our ISMS in preparation for assessment in September.

The toolkit was invaluable. The cost is minimal compared to the charges a consultant would make and gives the people involved in the writing and implementing a much better understanding of the subject.

I am not a IT person but was tasked with drafting and project managing our ISMS process and I couldn't have done it without the toolkit.

Hope that helps.

Trish

[Gazzil]

Thanks for your advice,

I've since bought the Toolkit and you're right, for a relatively small cost it does seem invaluable.

However, it also shows you just how much work is involved here which happens to be a lot, lot more than I initially expected!!

Our company is a decent size of arounf 70 employees with two branches and we are VERY stuck in our ways... I have a mammoth job ahead!!

Somehow, I think you'll be hearing a lot from me,

thanks again

Gaz