Although BS7799 could be seen as the UK government putting its foot down, Jones argues that it is only a first step. Many of our customers are using this standard. It's not a universal solution to security problems, but it does help companies to make sure they haven't missed any bases. Not that the DTI would argue with this analysis. This certifies third-party companies to act as auditors.
Accredited auditors conduct an independent check of applicants' ebusiness practices.
A steering committee sets criteria and monitors performance, and is made up of representatives from companies seeking certification and from ebusinesses that require tight security. We're looking for specific ebusiness guidelines. One company that was recently awarded BS7799 certification is Logica's systems integration division, Clef, which evaluates hardware and software for security weaknesses. Principal consultant Stephen Hill said the firm wanted to prove to potential customers that it is a safe security bet. BS7799 takes an holistic approach to security.