Re: ISO 27000

["Davis, Thomas R" <tdavis () IU EDU>]

Our Information Security and Privacy Program[1] is based on the ISO standards.  It's a work in progress (i.e., some 
domains are lacking information), but it shows the direction we're heading.

 [1] http://informationsecurity.iu.edu/program/ 
 
--
Tom Davis, CISSP, CISM
Chief Information Security Officer
Information and Infrastructure Assurance
Office of the VP for Information Technology and CIO
Indiana University
https://informationsecurity.iu.edu/Tom_Davis

On Jan 14, 2010, at 3:42 PM, Leilani Lauger wrote:

> We are trying to gather information about how our peers are using the ISO 27000 standards.  Is anyone using standards 
> to formally evaluate a security program or as a framework for building a new program?  Are they being used as a 
> complete body of work or to inform individual aspects of a security program?
>  
> We appreciate any feedback.
>  
> Thank you,
>  
> Leilani Lauger
> Information Security Officer
> Loyola University Chicago
> 773.508.6086
> llauger () luc edu