DAILY NEWS AND INFORMATION FOR THE GLOBAL GRID COMMUNITY /    ( Table of Contents )

Breaking News - Security:

ISSA Assembles Global Workgroups For Developing Principles

The Information Systems Security Association (ISSA) announced the global workgroups and leadership tasked with developing the Generally Accepted Information Security Principles (GAISP). Hundreds of security professionals have volunteered from around the world and were divided by topics of expertise to build out the Detailed Principles portion of the GAISP, a globally consistent, practical guidance for information security.

Industry experts have been chosen to lead each of the 14 groups, assigned to the high-level information security topics outlined by the GAISP Broad Functional Principles, such as Ethical Practices; Education and Awareness; Information Systems Life Cycle; and Legal, Regulatory, and Contractual Requirements. This stage of the development process was kicked off with an in-person meeting of the designated leaders, whose responsibilities include organizing the volunteers to develop principles according to the format and process created by the GAISP Executive Committee.

"This project has gotten off to a great start, with the completed Pervasive Principles and Broad Functional Principles acting as high-level references to develop the more specific tactical guidance of the Detailed Principles," said Mike Rasmussen, chair of the GAISP Executive Committee and vice president of standards and public policy for the ISSA. "The GAISP is mapped to top security regulations and standards to help guide security professionals at all levels, and in any industry. It is encouraging therefore, to see that we have such dedicated support from a broad cross section of global business and government."

Among the experts chosen to lead a sub-committee workgroup was Vaune Carr, practice director of global infrastructure services for Unisys.

"Organizations and individuals worldwide are beginning to recognize the need for a consistent point of reference for information security," Carr said. "It is critical that these guiding Principles are developed by the professionals that deal with security issues every day, ensuring that the GAISP is helpful, practical and free from any biases that may compromise its value."