Сделать реферирование текста по плану, с использованием клише ( был выдан). Beating the information security threat
Increasing computerisation and the sharp growth in e-commerce has undoubtedly revolutionised the way in which businesses trade. However, with increased opportunities come increased risks. Gerry Ashton, sector specialist for information security at LRQA in the UK, considers the importance of good management systems in helping counter threats to network security and considers the benefits that ISO/IEC 17799:2000 can bring. Information and IT systems are vital business assets and their availability, integrity and confidentiality are critical to maintaining an organisation's ability to function. Systems that have not been protected are vulnerable to any number of risks and there are indications that many organisations are still not taking the risks as seriously as they should.
This is supported by the findings from the most recent Department of Trade and Industry (DTI) Information Security Breaches Survey 2002, involving 1,000 telephone interviews, face-to-face in-depth interviews and an on-line web site poll with those responsible for information security in their organisation. Issued every two years, this is the sixth survey undertaken by the DTI and is intended to help UK businesses better understand the threats posed. Some key statistics from those surveyed show:
• 44 per cent of UK businesses have suffered at least one malicious security breach in the past year
• the average cost of a serious security incident was £30,000
• only 27 per cent of UK businesses have a documented security policy.
The 2002 survey indicates that while information security is now more widely understood and significant progress has been made in designing appropriate controls to counteract the risks, the threats have also increased. Organisations are reacting to the increased risks by implementing effective information security management systems (ISMS) and having these certified to BS 7799 part 2.
Certification to the assessable part of this ISMS standard will give an organisation a key advantage over competitors by providing invaluable additional credibility. It enables an organisation to make a public statement of capability without revealing its security processes or opening its systems to second party audits. It will also give the organisation confidence in the integrity and security of its own systems and processes as measured against the best industry practices.
Compliance with BS 7799 helps to demonstrate both to internal and external stakeholders that a company has taken action to safeguard their information systems and any data. It clearly benefits organisations, their customers and their trading partners if management information, critical data and IT systems are secure. Accredited certification from LRQA helps provide companies with the increased confidence that they meet best practice while also seeing the tangible business benefits an external statement from a recognised body can bring.