A badge on the shop door
A small shop wants customers and big firms to trust it. It wants a badge that says "we look after your data". But a badge is only worth something if somebody checked.
A standard gives a clear list to meet. Today you meet four.
Key words
| Word | What it means |
|---|---|
| Standard | An agreed list of rules that can be checked. |
| ISO 27000 series | A family of standards and guides for information security management. |
| ISO 27001 | The standard for setting up, running and improving an ISMS. |
| ISO 38500 | A standard that gives a framework for governing IT. |
| Cyber Essentials | A UK government-backed scheme. It gives a certificate for five basic controls. |
| Cyber Essentials Plus | The same five controls, with hands-on testing by an outside expert. |
| PCI DSS | A standard to cut card payment fraud. It covers anyone who handles card data. |
| Firewall | A control that allows or blocks traffic by rule. |
| Malware | Software made to do harm. |
| Certification | An official statement that a standard has been met. |
| Framework | A ready-made set of rules and steps to follow. |
The cells students fill in are left blank in this preview.
By the end of this lesson
Note
I can describe ISO 27000 and 27001, ISO 38500, Cyber Essentials and Cyber Essentials Plus, and PCI DSS, and say what each is for.
Starter: what you already know
Have a go
Starter: what you already know
3 questionsYour answers are marked here and are not kept. A college account keeps every student’s marks.
ISO 27000 and ISO 27001
The ISO 27000 series is a family of standards and guides for information security management.
ISO 27001 is the one you can be certified against. It sets out how to establish, run, maintain and keep improving an ISMS.
An outside auditor checks the company and, if it passes, gives a certification.
ISO 38500
ISO 38500 is a standard for governing IT in an organisation. The specification uses the 2015 edition. It gives a framework for leaders.
That edition is where the six governance principles come from: responsibility, strategy, acquisition, performance, conformance and human behaviour.
Check: the ISO standards
Have a go
Check: the ISO standards
4 questionsYour answers are marked here and are not kept. A college account keeps every student’s marks.