Welcome
Understanding Information security is maintained by info sec advisor Steve Wright. Subjects covered include:
Concepts relating to Infosec management (including confidentiality, integrity, availability, vulnerability, threats, risks and countermeasures)
Current legislation and regulations which impact upon Infosec management in the UK (and USA);
Current national and international standards, frameworks and organisations which facilitate the management of Infosec (ISO27001, PCIDSS, COSO, SOX, SB1386, HIPPA, COBIT, ITIL, ISO9001);
Current business and technical environments in which Infosec management has to operate;
Categorisation, operation and effectiveness of controls of different types and characteristics;
Business benefits, ROI, justification for infosec.
News
Blog
