BSI has just released the new PAS 555, “Cyber security risk. Governance and management. Specification.” It reflects the continuing emphasis on developing standards and protocols for reducing the risk of cyber attack. With new articles in the paper every day about breaches in web-based networks, any company with Internet connectivity needs to be aware of this type of new standards activity.
Many standards focus on the “how” of cyber security, but this publication takes a different tack. By concentrating on the identification of what effective security looks like, it allows for the user to implement best practices as they become available.
The document uses an outcomes-based approach to ensure enterprise confidence. The goal is a business-led, holistic approach to cyber security.
PAS 555 was sponsored by the Cyber Alliance (an industry consortium), led by a steering group of 13 organizations. The resulting document presents a definition of the key areas addressed by an effective cyber security system. Users then choose their own approach. This may include the use of other standards such as ISO/IEC 27001, ISO/IEC 27032 or internal best practices.
PAS 555 enables a company to:
- Focus investment in the most appropriate way
- Minimize potential loss
- Improve operational effectiveness and efficiency
- Develop organizational resilience
- Improve loss prevention and incident management
- Identify and mitigate cyber security risk throughout the organization.
It applies to not only the organization itself, but can be used throughout the supply chain.
Buy PAS 555 now from Document Center’s web store, www.document-center.com. We have a complete collection of BSI publications for you to choose from as well. Or contact us by phone (650-591-7600), fax (650-591-7617) or email if you require personal assistance.
Document Center prides itself on bringing you the latest information on new releases in standardization. You cannot afford to be unaware of the latest developments in the areas that are critical to your business. Look to Document Center Inc. to keep you up-to-date on the standards you need.
