ISO 27001

[Hal]

Contrary to the information given in this thread:
http://www.17799.com/modules.php?name=Forums&file=viewtopic&t=119

It appears that BS7799-2 is going to become ISO 27001, late this year or next year. There has been a re-think on the numbering system, with security standards being put under the ISO 27000 series.

ISO 24743 will therefore be unallocated.

[Biljana]

That is I suppose understandable since the JTC1 SC has number 27 - and giving this 001 says about its position...

[Calvin]

ISO27001 is to be the replacement for BS7799-2 by the end of year 2005

ISO 17799:2005 will be renamed in year 2006 or 2007 as ISO/IEC 27002

A new standard for BS7799 series:

BS 7799-3:2005 - information security management systems - guidelines for information security risk management” is a new British Standard due for release in December 2005

The new ISO27000 series will have five parts:

ISO 27000 will formally define the specific technical vocabulary used in these standards;

ISO 27001 will be the ISO version of BS 7799-2, the certification standard (due for full release in November 2005, already available as a final draft);

ISO 27002 will be the renamed and updated version of ISO 17799:2005 (to be released in 2006 or 2007);

ISO 27003 will contain guidance for those implementing the ISO 27000-series standards;

ISO 27004 will be a new Information Security Management Metrics and Measurement standard to help measure the effectiveness of information security management system implementations (currently in draft);

ISO 27005 will be the ISO version of BS 7799-3

Hope this helps.
CH

[zhaol]

noted. ISO27001 is released as you said.

Thanks for your information. I post your message at my blog.
_________________
############################
PhD, CISSP, ITIL, BS7799LA
############################