Developing Corporate Policies; Understanding Regulations - NetSHIELD Branch PRO User Manual

D C
EVELOPING ORPORATE
This chapter presents step-by-step use of SnoopWall NetSHIELD Policies and Regulations
options. You can develop security-related policies with this feature to keep ahead of regulations
that concern you.
NOTE: ISO 27001 and ISO 17799 are international standards used as the basis
for developing other regulations. Some laws, such as GLBA, HIPPA, and
COPPA, are specific to the United States. If you are in compliance with ISO
27001/17799, you are in compliance with all security regulations covered by
SnoopWall NetSHIELD.
NOTE: Within SnoopWall NetSHIELD documents and this manual you see
references to BS 7799 and ISO 17799 and ISO 27001.
BS 7799 stands for British Standard 7799. This is an internationally recognized
standard that describes protection of information assets. It was first published in
two parts. Most likely, you'll see them referred to by their ISO names, but you
may also see references to BS 7799 Parts 1 and 2 in the literature. (The ISO
standards evolved from the BS 7799 standards.)
ISO 17799 (BS 7799 Part 1) is a "code of practice" for information security
management. It describes best practices and contains a list of controls or
safeguards a company can follow to secure information and assets.
ISO 27001 (BS 7799 Part 2) provides a standard specification for implementing
an Information Security Management System (ISMS). Here, you select security
practices that meet the unique needs/risks of your environment. It is a
development methodology for creating an ISMS. ISO 27001 is the standard
against which certifications are made.
ISO 17799 and ISO 27001 are actually two different documents designed to
support each other. They are also aligned with other standards such as ISO
9000.
For easier reference within SnoopWall NetSHIELD environment, we refer to the
two standards as one (ISO 27001/17799).
If you want to build an ISO 27001/17799 compliant policy, work with the ISO 27001/17799
Policy Builder. Use the Basic Policy Builder if you prefer to work with a simpler tool and/or are
not concerned with ISO 27001/17799 compliance.

Select Policies and Regulations
Ten Tara Boulevard, Suite 140
Nashua NH 03062
P
OLICIES
U R
NDERSTANDING

Regulatory Documents.
EGULATIONS
Copyright © 2017 SnoopWall, Inc.
Page | 101