An Introduction
This factsheet provides an introduction to information security, covering risk management, good housekeeping and useful tools and techniques.

Glossary

Use this glossary to find terminology related to information security.

Guide for new computer users

Provides information security advice for new computer users.

Understanding BS 7799

Complying with the standard BS 7799 can help reduce risks to information security. Find out more about the standard and how to implement it.

ISO/IEC 17799 Users' Group

This group offers a forum for businesses to network and share best practice on information security.

Further help and advice

Browse this selection of links to further sources of help and advice on information security.

Viruses
Use this factsheet to find out about the risks of computer viruses and ways of protecting against them.

Theft
Find out about the impact of theft associated with computer systems, and what can be done to minimise risk.

Unauthorised Access
Introduces the risk of unauthorised access (also known as hacking) to information systems.

Inappropriate Usage
Explains how to define inappropriate usage, and provides a step-by-step guide on drawing up a detailed policy.

Systems Failure
A guide to the risks of systems failure and guidelines on incident response and crisis management.

Hints and Tips for Email Policy
Provides useful hints and tips on drawing up a policy on e-mail usage. 

Frauds and Scams
Desribes common types of frauds and scams, and how businesses can stay alert to them. 

Business Continuity Management
Outlines how businesses can counteract systems failure, including a ten-point disaster recovery plan.

Incident Management
Explains how businesses can deal with an incident or crisis that disrupts normal working patterns.

Policy and Standards
A factsheet that explains the policies and standards related to information security, including associated terminology and advice on implementation.

Legislation
Introduces some of the legislation relating to information security.

How to protect yourself against computer viruses
Summarises how to recognise, recover from and prevent computer viruses.

How to choose an Internet Service Provider
Summarises points to consider when selecting an Internet Service Provider.

How to write an Information Security Policy
Provides detailed advice to help create an Information Security Policy.

How to outsource and make use of external services
Provides advice and guidelines to consider when outsourcing work to third parties.

Asset inventory checklist
Provides an outline proforma for creating an asset inventory.

Email checklist
Lists fundamental, practical controls that can be implemented easily to protect e-mail systems.

Good housekeeping checklist
Lists high-level steps that establish best practice for small organisations.

Incident handling checklist
Provides straightforward ways of deciding whether to and how to report an incident.

Physical security checklist
Suggests a series of practices designed to make small offices (and homes) more secure.

Privacy Policy checklist
Highlights key areas which should be addressed when developing a privacy policy.