With the rise of global computer-related crime and security breaches, it is important that organizations follow best practice guidelines to ensure that their systems are not compromised by electronic attacks. The risk of electronic attack is greater when computer systems are connected directly or indirectly to public networks such as the internet. An electronic attack could:
- allow the attacker to gain access to your computer system and modify your information
- insert malicious software (eg viruses, worms, Trojans)
- allow the attacker to see restricted information
- make your systems impossible to use.
The following BS European and International standards and publications give recommendations on the management of Information Technology security.
Identifying, evaluating, treating and managing information security risks are key processes if businesses want to keep their information safe and secure. Whilst these processes are specified in the information security standard BS ISO/IEC 27001:2005, further guidance is required on how to manage these risks as well as to put them into context with other business risks.
