Welcome to the ninth issue of ISO 17799 News, designed to keep you abreast of developments and news with respect to ISO17799 and information security.

The newsletter is absolutely free to our subscribers and provides guidance on various practical issues, plus commentary on recent Information Security incidents.

Included in this edition are the following topics:

• Creating Information Classification Criteria
• What is Information Security?
• Standard Certifications
• Disposal of Old and Obsolete Equipment
• Section 11 - Getting Ready for Business Continuity Planning
• Business Continuity Planning Top Down
• Frequently Asked ISO17799 and ISO27001 Questions
• Controlling Changes to the Service Level AgreemenT
• More ISO 17799 and Security Related Terms and Definitions
• ISO17799 Section 12: The Sarbanes-Oxley Act 2002
• It Couldn't Happen Here.... Could It?

CERTIFICATIONS
Congratulations to all the following who we have recently added to our list of firms which have been certified with respect to BS7799 Part2 for at least one system in at least one location: A3 Security Consulting; Atos Origin; Misys Inernational Banking; Mitsue (Japan); Modulo Security (Brazil); Samsung; Fujitsu; Swiss Post; Total Network Solutions; Baltimore Technologies (Ireland); Mashreq Bank (UAE); Cable & Wireless; Hitachi; HMGCC; HM Land Registry; Wipro Technologies (India)

More certifications will be listed in future issues.