BS7799 - Relevance
The importance of business information and its security cannot be undermined in any manner and in any business with the growth of business rivalry and espionage that rivals the ancient kingdoms fighting with each other based on the information about the opponents.
This makes the BS7799 relevant to all kinds and sizes of business because in the modern world information is money. The standards provide the basic framework of the processes and procedures to be deployed and these can be fine tuned to meet the need of specific business.
The
value of information cannot be measured in tangible terms but when you
loose business opportunity due to information leakages you feel the
pinch on your body and think of remedies. The loss of a single
information for example the amount of bids in an closed tender; can
make or break the organization. The result could be catastrophic or
sometimes even insignificant depending upon the information. The loss
suffered is the only quantification of the value of any information but
what is the use of quantifying the value when the opportunity has been
lost.Information security and be implemented by use of access controls and other processes which needs to be defined which may go a long way to mitigate any such threat of information leakage yet always ensuring that access is available to those who have proper authorizations.
Public organizations, usually banks, telecom companies, insurance companies, hospitals which are huge and which handle information of millions of customers or business or individuals are specially prone to threats of information leakage which may affect their business very adversely. These organizations are especially vulnerable to attacks on their information database and it is a great challenge for these organizations to keep the information save and secure all the while providing access to all those who are authorized to use it. Information security has no relevance to business size; it has more relevance to the lost opportunity cost in case of information loss.