The Challenge

Hardly a month goes by when the media is not reporting the latest company to loose personable identifiable data. The Government and other agencies are introducing more stringent regulations to ensure that organisations are protecting customer information

A key standard that companies must look to comply with are that of BS 7799/ ISO 17799. These guidelines were originally developed by the British Standards Institute. BS 7799 sets recommendations on the best practices for information security management. They recommend three main areas to concentrate upon to guarantee the security of business data - availability, integrity and confidentiality.

Becoming PCIDSS compliant is another area that Blue Cube can assist. PCI DSS stands for Payment Card Industry Data Security Standards. They are a set of guidelines that have been created to ensure that those organisations that handle credit card transactions do not fall foul of hacking.

The guidelines indicate how to protect cardholder's data, protect networks and also monitor and combat threats and vulnerabilities.

The Service

Blue Cube offer a tailor made service for you and your organisation. With a proven methodology, Blue Cube assists organisations in assessing their compliance with BS 7799/ ISO 17799/PCI DSS along with a range of others spanning accross all industrie,s through to planning and implementing the actions necessary to become fully compliant or certified to the standard and that all of these policies and proceedures are in place and documented.

Blue Cube specialists can assist you in all of the key stages of a compliance or certification programme. This service can include:

• Benchmarking to assess the status of security management processes and controls
• Scoping studies to confirm the feasibility, costs and timetable for implementing the standards
• Using a gap analysis to identify the divergence of existing security arrangements against the standard
• Developing a Statement of Applicability (SoA) describing the relevance of each of the standard's controls to your organisation
• Producing an information asset register
• Implementing a Security Improvement Programme (SIP) to recommend the measures required to overcome the divergence identified in the gap analysis
• Guidance on preparing for certification

For further information please feel free to contact us on 0845 094 3070. Alternatively please email us

We look forward to hearing from you - Blue Cube