(Bundesamt für Sicherheit in der Informationstechnik)

● Code of Practice for Inform.
Security Management
● Dikembangkan oleh UK, BSI:
British Standard
● Security baseline controls:
– 10 control categories
– 32 control groups
– 109 security controls
– 10 security key controls
● Kategori kontrol:
– System access control
– Systems development &
maintenance
– Business continuity planning
– Compliance
– Information security policy
– Security organisation
– Assets classification & control
– Personnel security
– Physical & environmental security
– Computer & network management
● Digunakan untuk selfassasement:
– konsep keamanan dan
kesehatan sistem
● Tidak ada metodologi evaluasi dan
tidak diterangkan bagaimana assemen
thd keamanan sistem
● Sangat user-friendly sangat mudah
digunakan (menurut yang sudah
menggunakan)

Source : Staffsite.gunadarma.ac.id