the standard for outsource providers

ISO 27001 (beyond BS 7799)
The most widely accepted and well known information security standard is BS 7799. About 2,000 organisations across the globe are certified for this standard. It has been accepted by the International Standards Organisation and with some changes has been adopted as the ISO 27001 standard. It advocates a management system for the organisation to secure its information.
The security risk assessment for information is a core activity and based on the results of the assessment the organisation chooses security controls across IT, personnel and physical domains. Considering that this standard addresses management of information security for an organisation, it is holistic but the controls prescribed in it lack detail.
Being a management system driven standard, ISO 27001 is suitable for organisations across the industry. It is of great value to organisations that are keen on assuring their customers about the information security environment within an organisation. In India however, it is the IT and the ITeS organisations that are in the forefront in adopting the standard. It has become a qualifying requirement in most offshoring and outsourcing bids.

http://www.expresscomputeronline.com/20051226/bestdefence10.shtml



Why Information Security is important for your organization
Information is the crown jewels of business. Your business partners want to know if you have done enough to protect your information assets. The BS 7799 Information Security Management System outlines the best practices that one should follow and is a benchmark for security certification in business. by Avinash Kadam
http://www.networkmagazineindia.com/200209/security2.shtml
http://www.easyi.com/enus/_pdf/tb_mar_apr.pdf