Managing A Network Vulnerability Assessment

187

Appendix A-1

ISO 17799 Self-Assessment

Checklist

How to Use This Self-Assessment Checklist

This checklist is designed to assist you in taking “snapshots” of your organi-

zation’s security status. Answer each question, checking Y or N. The blank

column is designed for comments.

When you have finished each section, add the points — one for each question

answered Y.

Finally, total score (Sections 3 through 12): ______

Superior: > 95 “yes” answers

Fair: 82 – 95 “yes” answers

Marginal: 68 – 81 “yes” answers

Poor: 54 – 67 “yes” answers

At Risk: < 54 “yes” answers

188 Managing Network Vulnerability Assessment

3 Security Policy

Note: ISO17799, Sections 1 and 2 are ...