engleski

Some Controls of ISO/IEC 17799 Standard and Croatian Law

Standard ISO/IEC 17799 is a group of controls for establishing information security management system that provides integrity, availability and confidentiality of information. Except that organizations would maintain a system that would complied the standard ISO/IEC 17799, the same system must be linked to positive regulations of the Republic of Croatia that are applicable to information systems' security. Violation of security policies and procedures that are part of system is not only incompatibility to standard ISO/IEC 17799, but also violation of legal acts that foresees sanctioning. This paper will analyze legal requests and standard controls that apply to personel screening during recruitment and data protection and privacy of personal information. Standard proposals are defined as well as permitted and non-permitted action in Republic of Croatia.

information security; ISO 17799; Croatian Law

nije evidentirano