Importantly, the standards are battle tested: stemming from a 1995 British security standard (BS7799
), they have been in place since 2005 and are reviewed and updated regularly.
After developing an interest in Information Security Graeme moved into the National Health Service (NHS) working as an Information Governance Manager leading many security and privacy programmes and implementing BS7799
the forerunner to ISO 27001.
In the book "Security Guide" states that many studies show that over 80 percent of the organization's security problems occurred due to unintentional errors and intentional staff is [2003, sadowsky et al] Transportation and control of security "employees" of the first part of BS7799
standard which emphasizes the human element in the loop of information security is the most damaging, hence considering it helps us in achieving maximum safety .
BEW Global has provided ISO 27001, (previously BS7799
) consulting including gap analysis, risk assessment and certification services to over 100 companies around the world since 2003.
A SEI-CMMi Level 5 organization, Tech Mahindra's development centers are ISO 9001:2008 & BS7799
There are a number of ISMSs with related guidelines, such as the BS7799
 of England, the Common Criteria  international standard, the ISMS  of Korea, the DITSCAP , the Trusted Computer System Evaluation Criteria (TCSEC)  and the DIACAP  for the USA, the IT Security Evaluation Criteria (ITSEC) , and the IT Baseline Protection Manual  in Germany.
(British Standard 7799; now ISO 27001:2005), is the international best-practice information security management standard, defining and guiding Information Security Management System (ISMS) development.
Finally, the delivery centers in India were pushed aggressively to achieve global credentials such as the Capability Maturity Model (CMM) Level 5, CMMi Level 5, ISO27001, BS7799
, SAS70 Type II and others.
He is an experienced and recognised practitioner, particularly in the use and implementation of the BS7799
standard and incident management procedures.
"We identified a company to help us in building BS7799
based information security practice within DOHMS," says Al Ali.
Sify is recognized as an ISO 9001:2000 certified service provider for network operations, data center operations and customer support, and for provisioning of VPNs, Internet bandwidth, VoIP solutions and integrated security solutions, and BS7799
certified for Internet Data Center operations.