Re: [dssa] question: is there a service available that does what the NEISAS project (and ISO 27010) describes?

[Don Blumenthal <dblumenthal@xxxxxxx>]

Excellent stuff. I dropped a note to a friend and one-time consulting
colleague who is a certified ISO 27000 auditor. Maybe he'll have some
sources.

Don



On 4/20/12 8:29 AM, "Mike O'Connor" <mike@xxxxxxxxxx> wrote:

>
>hi all,
>
>i'm chewing away on the "repository" question that Julie Hammer raised on
>the call yesterday.  i found a reference to the NEISAS project in the
>notes and went out to their site to see what it's about.  here's a link
>
>       http://www.neisas.eu/
>
>there's a movie on that page that describes how the system works (they
>built a prototype as a part of their project).  it's very interesting!
>
>unfortunately, the project wrapped up earlier this year with the
>publication of an ISO standard (ISO 27010) which "provides controls and
>guidance specifically relating to initiating, implementing, maintaining,
>and improving information security in inter-organizational and
>inter-sector communications."   that's quite a mouthful that makes much
>more sense once you've watched the movie.
>
>so here's the question of the day.  is there a service like this up and
>running somewhere?  i know, that's a weird question, but it too make more
>sense too if you've watched the movie -- maybe i'm over-promoting it, but
>i think exploring the concept they worked on would be really useful in
>our "confidential information" context.
>
>thanks,
>
>mikey
>
>- - - - - - - - -
>phone  651-647-6109
>fax            866-280-2356
>web    http://www.haven2.com
>handle OConnorStP (ID for public places like Twitter, Facebook, Google,
>etc.)
>
>