ISO 17799 and ISO 27001 Newsletter: Interviews

The interviews are listed below. Click on a question to view the specific answer

The Auditor - David L Watson You were the first Certified BS7799 c:cure Auditor. How did that come about? When was that? Where do you see the IRCA Scheme going? How does the BS7799 / ISO 27001 certification audit process actually work? Audits are always a bit scary – how do you put people at ease during one? Do you still undertake ISO 17799 / BS7799 related work? What are the most common mistakes you have encountered? Have you any hints or tips on implementation, certification or the standard generally? Where do you see the standard going in the next few years? Any last points? Contact David Watson

The Standards Body - BSI BS7799 / ISO/IEC17799 was originally a 'code of practice' published by the DTI. Could you explain the process by which it became a BS standard, and then eventually an ISO standard? BSI cover a whole range of 7799/17799 activities. What do you see as your major roles? Are there any potential conflicts of interest? What is the typical life cycle of standards like this? Basically, how often are they revised and re-published? There have been suggestions part 3 of the series is in development. What is that all about and what will it cover? BSI Information

The User Group - Kate Hartley What made you set up a user group for ISO 17799 professionals? Why and when? What are the biggest problems you have encountered, and how did you overcome them? Will it continue to be free in the future? Does it cost much to run it? Do you get any support from the developers of the standards, publishers or other parties? What plans do you have for the future? International ISO 27001 and ISO 17799 User Group Information

Other Interviews - Coming Soon A series of other interviews will be added to this section in due course. These will include: A Certified Company A Consultant A Quality Manager Another National Standards Body A Certification Body If you have any suggestions regarding suitable interviewees, and/or specific questions you would like to be asked, or issues you would like to be raised, please contact us and let us know. Equally, if you have or have had a role in shaping the standard, please get in touch.

The ISO 17799 Newsletter is published periodically. To receive a free copy via email simply complete the form provided.