At 02:10 PM 12/17/94 GMT, Ian Johnson-Bryden wrote:
>Like the old BSI BS5750 system, ISO 9000 does not really impose any special
>constraints. The company has to formally document how it works. Small
It seems to me that documenting the procedures used to install and maintain
the firewall might be a good idea even without ISO 9000 hanging over one's
head. Of course, one hopes that commercial firewalls would come with a lot
of this documentation, although in my experience this sadly isn't always the
case.
Maybe I can use ISO 9000 as leverage to get clients to spend the appropriate
amount of time to produce realistic security policies :-).
Ian
-----
Ian Poynter ian @
jerboa .
com
Jerboa Internet Services (617) 357-5013
PO Box 120054, Boston, MA 02112
Providing Internet advice, consulting and training for businesses.
|
|
