資訊安全管理系統(ISMS)ISO17799/BS7799國際認證體系與稽核驗證介紹

The International Accreditation and Certification of ISO17799/BS7799 Information Security Management System (ISMS)

蒲樹盛(Peter Pu)

《研考雙月刊》 29卷1期 (2005/02) Pp. 91-104

https://doi.org/10.6978/YKSYK.200502.0091

摘要

爲使各組對於資訊安全管理系統(ISMS)ISO17799/BS7799國際認證體系(Accreditation)與稽核驗證(Certification)有更清楚正確之瞭解，本文就國際認證(Accreditation)體系架構介紹國際相關組織（認證組織、驗證組織…）及其相互關係，以及稽核驗證(Certification)之流程說明，祈對有興趣之組織提供正確清晰之輪廓。

關鍵字

資訊安全 ； 認證 ； 驗證 ； BS7799 ； ISO17799

並列摘要

In order to provide a clear and accurate understanding of the Accreditation and Certification of Information Security Management System (ISMS)-ISO17799/BS7799 to all organizations, this article is to introduce the relevant international organizations (Accreditation Body, Certification Body) and their interrelationship based on the structure of Accreditation system. Furthermore, this article also clarifies the registration process of Certification in anticipate to present a precise outline to those organizations with interest.

並列關鍵字

Information Security ； accrditation ； certification ； BS7799 ； ISO17799