BS 7799

What is BS 7799?

BS 7799 is the British Standard that served as the original foundation for the entire ISO 27000 family of information security standards. Published by the British Standards Institution (BSI) in 1995, it was the first international-level framework for an Information Security Management System (ISMS). While the standard has since been withdrawn and replaced by its ISO counterparts, it is a crucial part of the history of ISO 27001.

Context

The BS 7799 standard was initially split into two main parts:

• BS 7799-1: A Code of Practice for information security management, which evolved into ISO/IEC 27002. This document provides detailed guidance and controls.
• BS 7799-2: The specification for an ISMS, which eventually became ISO/IEC 27001. This part is the certifiable standard that defines the requirements for an ISMS.

Why it matters

Understanding BS 7799 provides valuable historical context and shows the evolution of ISO 27001 from a British standard to a globally recognised framework. It also highlights that the core principles of information security management have remained consistent over time.

About the author

🎓 MSc Security 🛡️ Lead Auditor ⚡ 30+ Years Exp 🏢 Ex-GE Leader

Stuart Barker

ISO 27001 Ninja

Stuart Barker is a veteran practitioner with over 30 years of experience in systems security and risk management. Holding an MSc in Software and Systems Security, he combines academic rigor with extensive operational experience, including a decade leading Data Governance for General Electric (GE).

As a qualified ISO 27001 Lead Auditor, Stuart possesses distinct insight into the specific evidence standards required by certification bodies. His toolkits represent an auditor-verified methodology designed to minimise operational friction while guaranteeing compliance.