[dssa] question: is there a service available that does what the NEISAS project (and ISO 27010) describes?

["Mike O'Connor" <mike@xxxxxxxxxx>]

hi all,

i'm chewing away on the "repository" question that Julie Hammer raised on the 
call yesterday.  i found a reference to the NEISAS project in the notes and 
went out to their site to see what it's about.  here's a link

        http://www.neisas.eu/

there's a movie on that page that describes how the system works (they built a 
prototype as a part of their project).  it's very interesting!  

unfortunately, the project wrapped up earlier this year with the publication of 
an ISO standard (ISO 27010) which "provides controls and guidance specifically 
relating to initiating, implementing, maintaining, and improving information 
security in inter-organizational and inter-sector communications."   that's 
quite a mouthful that makes much more sense once you've watched the movie.

so here's the question of the day.  is there a service like this up and running 
somewhere?  i know, that's a weird question, but it too make more sense too if 
you've watched the movie -- maybe i'm over-promoting it, but i think exploring 
the concept they worked on would be really useful in our "confidential 
information" context.  

thanks,

mikey

- - - - - - - - -
phone   651-647-6109  
fax             866-280-2356  
web     http://www.haven2.com
handle  OConnorStP (ID for public places like Twitter, Facebook, Google, etc.)