The survey reports UK interest in the ISO 27000 standards but the most recent survey by ISO showed only 486 certificates in the UK compared to 3,790 in Japan.
The basis of ISO27001, the standard used for certification, is the Plan, Do, Check, Act cycle referenced to Dr Deming though he called it the Shewart cycle and the word "Study" is also widely used in place on "Check". The standard describes how an information security system can be established, operated, reviewed and improved. There is a requirement for system review as well as corrective and preventive action. The controls selected for a specific system are a consequence of the management process.
My impression is that this kind of systems approach may not be well accepted in the UK. There appears to be more interest in leadership as a topic than in how organisations learn to adopt in a new context such as that associated with an increased role for information. The approach of finding senior managers to blame when future problems arise may not be as helpful as looking at procedures and culture more widely.
This is the central bit in what I would like to talk about at the "Safety" conference in Lancaster. The ISO standards can be integrated as management because they each have Plan-Do-Study-Act as a basis. Why it works in Japan ok but less in the UK is still a bit of a mystery but OhmyNews is well placed to cover this. It may take a while.
Leadership is obviously part of the discussion but I still think the "learning organisation" topic was dropped too quickly in the UK. "Networked learning" is also part of this. The security is traded off with access so is never complete. Security awareness can come through forms of learning like anything else.
The other development is that WorldTV now offer service to combine web video as a channel. Victor Keegan wrote about it in the Guardian so this an example of the contribution made by professional print journalists, just to make it clear that bloggers recognise this sometimes.
I have strung together the videos of the Lancaster campus, click here for the Bailrigg channel ,starting at Info21 and ending up at the Spicy Hut. the scenario is a journey from a discussion on some proposal that meets some security and communication criteria intended for a client meeting at the Spicy Hut. Will the intention survive critique along the way? World TV allows new video to be inserted in the sequence. It could be from anywhere, a lot of places look much the same. Could end up as fiction or documentary. Text versions could inlcude comments on this blog or there is a Google doc.
No comments:
Post a Comment