Comparison between security frameworks ISO 17799, ITIL and COBIT
Currently, there are a lot of information security frameworks that could be used to have a sounds good and strong information system assurance. Some of the examples are including ISO177999/27001, ITIL, COBIT, Octave and others information system security frameworks. Below, simple free comparison between security frameworks ISO 17799, ITIL and Cobit that can be used to gain better understanding about this best practices framework.
| BS 7799/ISO 27000 family | BS 7799 Part 1: ISO 17799, ISO 27002 code of practice 133 controls, 500+ detailed controls BS 7799 Part 2 ISO 27000 |
| COBIT | ISACA (formerly Information Systems Audit and Control Association) Four phases/domains: Planning and Organization Acquisition and Implementation Delivery and Support Monitoring |
| Common Criteria for Information Technology Security Evaluation | ISO 15408 not a security framework not even evaluation standard Framework for specification of evaluation Protection Profile (PP) Evaluation Assurance Level (EAL 1-7) |
| Federal Information Systems Management Act – US | National Information Assurance Certification and Accreditation Process (NIACAP) National Institute of Standards and Technology outline, Defense Information Technology Systems Certification and Accreditation Process (DITSCAP) Director of Central Intelligence Directive 6/3 |
| Standard of Good Practice for Information Security | 5 "aspects" Security Management Critical Business Applications Computer Installations Networks Systems Development broken out into 30 "areas," and 135 "sections" www.securityforum.org http://www.isfsecuritystandard.com/pdf/standard.pdf |
| Information Technology Infrastructure Library | management guidelines Incident response Problem management Change management Release management Configuration management Service desk management Service level management Availability Capacity management Service continuity IT financials IT workforce/HR management security removed in recent revision influenced BS 15000, ISO 20000 |
| Attachment | Size |
|---|---|
| Comparison-between-security-frameworks-ISO17799-ITIL-Cobit.ppt | 720 KB |
- 2258 reads