Web Directory

» Common Criteria
   Provides the Common Criteria for Information Technology Security Evaluation, also published as ISO/IEC 15408.
   http://www.commoncriteriaportal.org/thecc.html

» ISO 27000 Toolkit
   Commercial package containing the ISO/IEC 27001 and 27002 standards plus supporting materials such as policies and a glossary.
   http://www.17799-toolkit.com/

» ISO 27001 Certificates
   Comprehensive listing of organizations certified against ISO/IEC 27001 or equivalent national standards, based on submissions from the certification bodies.
   http://iso27001certificates.com/

» ISO 27001 Security
   Up to date information and news about the ISO/IEC 27000-series information security standards, with discussion forum, FAQ and links to other security standards.
   http://www.iso27001security.com/

» ISO/IEC 27000
   Introduces the ISO/IEC 27000 series of standards and provides a common glossary of information security terms used in the standards. Free download. [ZIP file containing PDF]
   http://standards.iso.org/ittf/PubliclyAvailableStandards/c041933_ISO_IEC_27000_2009.zip

» ISO/IEC 27001 Frequently Asked Questions
   Short FAQ covers the basics of ISO/IEC 27001, the management system standard.
   http://www.atsec.com/us/iso-iec-27001-faq.html

» ISO27k Implementers' Forum
   Google Groups discussion forum for those actively implementing the ISO/IEC 27000-series standards.
   http://groups.google.com/group/iso27001security

» IT Governance Limited
   Information, books, tools and training for developing and implementing an information security management system in line with the international best-practice specification ISO/IEC 27001.
   http://www.27001.com

» Information Governance Limited
   Supplier of Proteus Enterprise security risk management software for compliance with ISO/IEC 27002 and related information security, risk management and IT governance standards.
   http://www.infogov.co.uk

» Information Security & Business Continuity Academy
   Training and consultancy support services for those implementing ISO/IEC 27001 and BS 25999-2
   http://www.iso27001standard.com

» Information Security Forum Standard of Good Practice
   The ISF standard addresses information security from a business perspective, providing a practical basis for directing, structuring and assessing an organization’s information security arrangements.
   http://www.isfsecuritystandard.com

» Jake Smith Consulting
   Consultant specialising in helping organisations achieve ISO/IEC 27001 compliance and certification.
   http://www.jakesmithconsulting.com.au/

» NERC Reliability Standards
   Information on the development of cyber and information security standards with emphasis on reliability.
   https://standards.nerc.net

» NIST Special Publication 800-53
   Recommended Security Controls for Federal Information Systems has a similar scope to ISO/IEC 27002 and cross-references the standard.
   http://csrc.nist.gov/publications/nistpubs/800-53-Rev2/sp800-53-rev2-final.pdf

» Orange Parachute
   An information security and integrated systems management consultancy specializing in ISO/IEC 27001 certification, audits, assessments and training.
   http://www.orangeparachute.com

» Overview of Information Security Standards
   Report by the Government of the Hong Kong Special Administrative Region outlines the ISO/IEC 27000-series standards plus related standards, regulations etc. including PCI-DSS, COBIT, ITIL/ISO 20000, FISMA, SOX and HIPAA.
   http://www.infosec.gov.hk/english/technical/files/overview.pdf

» Praxiom Research Group
   Plain English descriptions of ISO/IEC 27001, 27002 and other standards, including a list of the controls.
   http://praxiom.com/

» Sagenti Inc
   Software and services for assessing and managing information security risks in the context of an ISO/IEC 27001 management system.
   http://www.sagenti.com

» Shared Assessments
   Questionnaire and review process used to assess business partners' information security status using ISO/IEC 27002, COBIT, PCI-DSS and others.
   http://www.sharedassessments.org/

» The ISO 27000 Directory
   Information covering the ISO/IEC 27000 series of standards, including updates and consultants directory
   http://www.27000.org

» The Security Practitioner
   The ISO 27001 Perspective: An Introduction to Information Security is a guide to ISO/IEC 27001 and 27002 in the form of an HTML help file.
   http://security.practitioner.com/introduction/

» Veridion
   ISO/IEC 27001 and 27002 training courses including Lead Auditor and Lead Implementer, plus other information security, risk management and business continuity courses on BS 25999, CISSP, CISA, CISM, MEHARI and OCTAVE.
   http://www.veridion.net

» Wikipedia: ISO/IEC 27000-series
   Open encyclopedia entry for the ISO/IEC 27000 family of information security management system standards, with links to pages on several standards in the family.
   http://en.wikipedia.org/wiki/ISO/IEC_27000-series

» Yahoo! Groups iso-27001
   Discussion forum for ISO/IEC 27001 and 27002
   http://tech.groups.yahoo.com/group/iso-27001/