The Case for ISO 27001

Chapter 18. ISO 27001 in the Public Sector

Executive summary

Many public sector organizations usually face more significant threat levels than the private sector. All the threats identified earlier in this book apply, but in spades. In addition, many public sector organizations are subject to very specific requirements in terms of information security structures.

UK Public sector organizations

The CSIA (Central Sponsor for Information Assurance) is the UK Government’s Cabinet Office unit that is charged with working with the public and private sectors, and its international counterparts, to safeguard the UK’s IT and telecommunications services. Specifically, the CSIA role is to provide a central, national focus for information security and its mission ...