This 7799 checklist shall be used to audit Organisation's Information Technology Security standard. This checklist does not provide vendor specific security considerations but rather attempts to provide a generic checklist of security considerations to be used when auditing an organisation's Information Technology Security.

This checklist is not a replacement for any 7799 Standard. But this checklist can be used in conjunction with 7799 standard to review and evaluate IT security of the organisation.

References

1. Information Security Management, Part2: Specification for Information security management systems AS/NZS 7799.2:2003 BS 7799.2:2002

2. Information Technology - Code of practice for Information Security Management AS/NZS ISO/IEC 17799:2001

• ISO 17799 Checklist 1.1 (DOC)
• ISO 17799 Checklist 1.1 (PDF)