Information Security = Management System: 08/22/07

skip= to main=20 | s= kip to=20 sidebar

Search in ISMS Guides

=20 Enter your search = terms=20 Submit search form

=20 Web

isms-guide.blogspot.com

Wednesday, August 22, 2007

The MIC has compiled the Information Security Management = Guidelines=20 for Telecommunications as a contribution to the establishment of = information=20 security management in the telecommunications business.

Background

Nowadays, with the increase in information security threats such as = viruses,=20 cyber-attacks and information leaks, organizations are being required to = put in=20 place information security management. With regard to this point, the = Study=20 Group on Next Generation IP-based Infrastructure (chaired by SAITO = Tadao,=20 Professor Emeritus, the University of Tokyo) stated in its second report = (announced on July 7, 2005) that there was a need to establish and = promote the=20 guidelines for information security management for telecommunications=20 business.

The MIC set up the Task Force on ISMS-T* (chaired by NAKAO Koji, = General=20 Manager, Information Security Department, KDDI Corporation) in February = 2005.=20 The group considered topics that should be taken into account in line = with the=20 implementation of information security management for telecommunications = organizations. These have now been compiled as the Information Security=20 Management Guidelines for Telecommunications (referred to below as "the=20 guidelines").

* Information Security Management System for = Telecommunications=20

Outline of the guidelines

The guidelines comprise control, implementation guidance, etc, in 11 = areas of=20 information security management, to establish information security = management=20 within telecommunications organizations.

Future plans

The MIC will work in cooperation with telecommunications carriers and = relevant industry organizations to implement the guidelines, and will = propose=20 these guidelines to the ITU (International Telecommunication Union) as a = contribution to considering the information security management = guidelines for=20 telecommunications.

Background of Investigation

3D"Background

<= BR>

Comparison of Control in International Standards

3D"Comparison

Information Security Management Guideline for = Telecommunications

3D"Information

Organization of the Guidelines

3D"Organization

"FY2005 Competition Review in the = Telecommunications=20 Field"
-- Release of "Market Definition of Fixed Telephone Segment" =

Upon implementation of the "FY2005 Competition Review in = the=20 Telecommunications Field," MIC invited public comments and held the open = conference on the "Market Definition of Fixed Telephone Segment" for = defining=20 objective markets.

Background

During the period from February 22 through March 15, 2006, MIC = invited public=20 comments on the "FY2005 Competition Review in the Telecommunications = Field=20 'Market Definition of Fixed Telephone Segment (draft).'" During said = period, MIC=20 received nine comments.

In addition, on March 22, 2006, MIC held the open conference on the = "Market=20 Definition of Fixed Telephone Segment" for exchanging opinions with=20 stakeholders, including telecommunications carriers and specialists. = Based upon=20 those results, MIC defined the objective markets for review.

Future plans

Based upon the "Basic Approach of Competition Review in the=20 Telecommunications Field" and the "FY2005 Details for Implementation of=20 Competition Review in the Telecommunications Field," MIC will analyze = the=20 markets as defined for review. In summer of 2006, MIC will publicize the = "FY2005=20 Competition Review in the Telecommunications Field."

In FY2005, MIC will analyze mainly the fixed telephone segment, in = parallel=20 with such segments as the mobile communications and the Internet = access.

Main points of "Market Definition of Fixed Telephone Segment"

The FY2005 Competition Review targets the fixed telephone segment = carries out=20 a new analysis, the main points governing ideas on the market definition = are as=20 follows. Concerning the segments such as "Internet access" and "mobile=20 communications," the results of market definition for FY 2003 and 2004 = are=20 adopted.

Settling the market structure of fixed telephones
- = "Access" and=20 "Call" will not be differentiated, both being taken together in making = up the=20 market.
- "Access" can be selected from (1) NTT East/West telephony = service,=20 (2) Direct access telephony service, (3) Cable telephony service or (4) = OABJ=20 (geographical number) type IP telephony service.
- "Call" can be = selected=20 from (5) PSTN call service, (6) 050 (location free number) type IP = telephony=20 service or (7) Internet telephony service. In the case of (1) "Call" is=20 unbundled from "Access" and call service carriers can be selected = freely. But in=20 the case of (2) to (4), "Call" is bundled to "Access" and call service = carriers=20 are limited.

Market definition of fixed telephone segment (service = market)
- The=20 range of the market has been defined as (1) NTT East/West telephony = service, (2)=20 Direct access telephony service, (3) Cable telephony service and (4) = OABJ type=20 IP telephony service.
[Reason] (1) to (4) options offer a high level = of=20 demand-side substitution little difference in functions, and comparable = with=20 each other when contracting, etc).

Handling of NTT East/West telephony service
- The (1) NTT = East/West=20 telephony service will be handled as a sub-market, and in addition to = analyzing=20 the demand structure of the service, we will also analyze the state of=20 competition in (5) PSTN call service and (6) 050 type IP telephony=20 service.
[Reason] NTT East/West telephony service have a high level = of=20 independence "Access" and "Call" are structurally separated, and there = exists=20 much switching cost when changing the service, etc.)
We did not = define the=20 market for (7) Internet telephony service, for the demand for the = service has=20 not taken off yet. So analysis will be conducted where data is = available.

Definition of geographical market
- The administrative = division=20 into prefectures is the smallest unit for analysis.
- Taking the = state of=20 competition into account, geographical markets have been set into 2 = areas of=20 eastern and western Japan according to the service areas of NTT = East/West, or=20 for 10 regional blocks nationwide according to the service areas of the = electric=20 power companies.
[Reason] In terms of the possibility of obtaining = data, the=20 division is the minimum unit. Since we define the geographical market = based on=20 the state of competition, it is necessary to analyze the market divided = into 2=20 areas according to the service areas of NTT East/West or the market = divided into=20 10 areas according to the service areas of the electric power = companies.

Handling of 050 type IP telephony service (relationship with = Internet=20 access market)
- With regard to 050 type IP telephony service, we = analyze=20 from many aspects such as a sub-market of the Internet access market and = also as=20 a part of the IP telephony (050 type and 0ABJ type IP telephony) market, = in=20 addition to the analysis as a part of the fixed telephone = market.
[Reason]=20 050 type IP telephony service substitute the functions of PSTN call = service, but=20 many users consider the service as an additional service to Internet = access. In=20 addition, they can hardly distinguish the service from the OABJ type IP=20 telephony service, and see both as the IP telephony service.

Relationship with mobile communications market
- Fixed = telephone=20 market and mobile communications market are separate markets (observe = the=20 leverage from the other market and the trend in FMC = services).
[Reason]=20 Although there is a definite substitution between fixed and mobile, = there is=20 also a complementarity as they are used together. So it is unsuitable = for them=20 to be considered as the same market.

Preparatory Meeting Held for the = Establishment of=20 Hotline Center

The Internet Association Japan held a preparatory meeting = to put=20 together standards from experts and related people from industry = organizations=20 and the like, in order to make the preparations necessary for the = establishment=20 of "Hotline Center" (provisional name).

Aims

Illegal materials on the Internet, such as child pornography and = information=20 on covert sale of drugs and the like, as well as sites that are not = immediately=20 seen as illegal, such as suicide sites and those showing the = manufacturing=20 process for explosive devices, and harmful information regarding = contracts=20 murders and other illegal acts have been circulating on the Internet and = have=20 become a major societal problem.

Taking these circumstances into consideration, and in order to = promote=20 effective measures against illegal activity and harmful information on = the=20 Internet, information provided by Internet users concerning illegal and = harmful=20 information will be collected and classified according to predetermined=20 standards. The police will be informed concerning illegal information = and=20 requests will be made to the administrators of the providers or = electronic=20 notice boards asking that measures be taken to block the = transmissions.

A preparatory meeting for the establishment of hotline center was = held so=20 that providers can fulfill their responsibility in the face of harmful=20 information by taking action and making the preparations necessary to = set up=20 "Hotline Center" (provisional name).

Outline

Date and Time: April 4, 2006 (Tuesday) 2-3pm
Place:=20 Shinbashi Internet Association Japan, Shinbashi Frontier Bldg. 6th = floor, 3-4-5,=20 Minato-ku, Tokyo
Organizer: Internet Center=20 Japan
Proceedings:
- Preparatory meeting for the = establishment of=20 hotline centers
- Invitation to comment on the range of illegal and = harmful=20 information handled by the hot lines and procedure for determining = this

Outline of "Hotline Center" (provisional = name)

Background of establishment

At present, the circulation of child pornography on the Internet, = information=20 on restricted drugs and the like, as well as sites that are not = immediately seen=20 as illegal, such as suicide sites and those showing the manufacturing = process=20 for explosive devices, and harmful information regarding contracts for = illegal=20 activities such as murders, have become a major societal problem.

Countermeasures to deal with this illegal and harmful information on = the=20 Internet, such as arrests by the police and requests to administrators = of=20 providers and electronic notice board operators to voluntarily take = measures to=20 stop these transmissions, have been taken. But since vast amounts of new = information circulate on the Internet every day, it is clear that there = are=20 limits to such countermeasures.

Against such a background, and in order to promote effective and = efficient=20 measures against illegal and harmful information on the Internet, the = Study=20 Group to Address Illegal and Harmful Information on the Internet also = stated in=20 its interim report (announced on January 26, 2006) that an investigation = should=20 be carried out on policies to support and promote effective measures by=20 providers and electronic notice board operators to stop such = transmissions.

In addition, the National Police Agency, in its fiscal year 2005 = General=20 Security Countermeasures Conference, stated that it receives a large = number of=20 notices from users concerning illegal and harmful information on the = Internet,=20 and proposed that decisions concerning the information received should = be made=20 based on predetermined standards, and that there was a need to request = of=20 administrators at providers and electronic notice board operators for = "hotlines"=20 and a framework for their operation in response to the information.

At present, operation guidelines are being investigated at "Hotline = Center"=20 (provisional name) which will be the implementation bodies for these=20 hotlines.

Responsibilities

"Hotline Center" (provisional name) will receive information = concerning=20 illegal and harmful information on the Internet from Internet users and = will=20 categorize them according to predetermined standards that consider the = balance=20 between fundamental human rights such as freedom of expression and = public=20 welfare. A decision will be made based on predetermined standards, = followed by a=20 notice to the police and a request to administrators at providers and = electronic=20 notice board operators to erase the information.

[Reference]
Meeting of the Study Group to Address Illegal and = Harmful=20 Information on the Internet
http://www.soum= u.go.jp/s-news/2005/050728_5.html
Midterm=20 report of the Study Group to Address Illegal and Harmful Information on = the=20 Internet
http://www.soum= u.go.jp/s-news/2006/060126_1.html

Operation form

The Center will be operated by a private entity and it is planned = that a=20 certain number of experts provide the hotline services, after installing = service=20 bases and preparing necessary reference material and equipment.

From : Mic=20 Communications News Vol.17 No.2

ISO/IEC=20 27000 Information Security Standards Family Adopts a New Member =

(July 17, 2007)-- ISO/IEC has formally announced the incorporation of = the=20 popular Code of Practice for Information Security Management, formerly = known as=20 ISO/IEC 17799:2005 and originally BS 7799, into the ISO/IEC = 27000-series. The=20 standard is now known as ISO/IEC 27002:2005.

The announcement is = more=20 significant than merely a change of name. The growing family of ISO/IEC = 27000=20 series information security standards is increasingly recognised by = information=20 security professionals worldwide as an embodiment of good information = security=20 practices. Well over 3,500 large and small organizations have been = formally=20 certified compliant with ISO/IEC 27001, with many thousands more using = the=20 standards internally to structure their approach to information security = management and drive continuous security improvements.

First = released in=20 1995, British Standard BS 7799 comprised three parts. Part 1 became = ISO/IEC=20 27002. Part 2 became ISO/IEC 27001. Part 3 is anticipated to become = ISO/IEC=20 27005 in due course.

ISO (the International Organization for=20 Standardization) and IEC (the International Electrical Committee) = released=20 ISO/IEC 17799 in 2000 and revised in 2005. Apart from the name , ISO/IEC = 27002:2005 is identical to ISO 17799:2005. Its full English title is:=20 "International Standard ISO/IEC 27002:2005. Information technology - = Security=20 techniques - Code of practice for information security = management".

The=20 ISO/IEC 27000 family is evolving rapidly but at present comprises the = following=20 issued or proposed standards:

* ISO/IEC 27000 - will contain the=20 vocabulary and definitions i.e. the specialist terminology used by all = of the=20 ISO27k standards.

* ISO/IEC 27001:2005 - is the Information = Security=20 Management System requirements standard (specification) against which=20 organizations are formally certified compliant. Published.

* = ISO/IEC=20 27002:2005 is the code of practice for information security management=20 describing a comprehensive set of information security control = objectives and a=20 menu of generally accepted good practice controls. Published.

* = ISO/IEC=20 27003 - will be an implementation guide for these standards.

* = ISO/IEC=20 27004 - will be an information security management measurement (metrics) = standard to improve the effectiveness of your ISMS.

* ISO/IEC = 27005 -=20 will be an information security risk management standard (replacing BS = 7799 Part=20 3).

* ISO/IEC 27006:2007 - is a guide to the certification or=20 registration process for accredited ISMS certification or registration = bodies.=20 Published.

* ISO/IEC 27007 - will be a guideline for auditing = Information Security Management Systems.

* ISO/IEC 27031 will be = a=20 business continuity standard.

* ISO/IEC 27032 will be guidelines = for=20 cybersecurity

* ISO/IEC 27034 will be guidelines for application=20 security.

* ISO/IEC 27799 - will be health sector-specific = implementation=20 guidance for ISO/IEC 27002. Other sector-specific implementation guides = are=20 planned for industries such as lotteries and (in conjunction with the = ITU)=20 telecomms.

From : = www.compliancehome.com

ISO/IEC=20 27031 Information technology

ISO/IEC 27031 Information technology -- Security techniques -- ICT = readiness=20 for business continuity (draft, title uncertain)

This new = business=20 continuity standard may be based on a Singaporean BC/DR standard SS507 = (see=20 below) and may incorporate parts of British Standard BS25999. Published = July 18,=20 updated Aug 16 If you are interested, Part = 2 of BS25999 is currently freely available in draft for = comments=20 prior to its formal publication but = hurry=20 - comments were due at the end of July 2007 and final release must be=20 imminent.

SS507 - Singapore = Standards for=20 Business Continuity/Disaster Recovery (BC/DR) Service=20 Providers

SS507:2004 =E2=80=9CProvides a basis to certify = and=20 differentiate the BC/DR service providers, helps the end-user = organisations in=20 selecting the best-fit service providers and provides quality assurance. = Also=20 establishes industry best practices to mitigate outsourcing=20 risks.=E2=80=9D

=E2=80=9CSingapore [was] the first country in the = world to introduce a=20 Standard and Certification programme for BC/DR service providers. = Developed by=20 the Infocomm Development Authority of Singapore and the IT Standards = Committee=20 (ITSC), the Standard specifies the stringent requirements for BC/DR = service=20 providers. These requirements benchmark against the top practices in the = region=20 and stipulate the operating, monitoring and up-keeping of BC/DR services = offered. ... By engaging a certified BC/DR service provider, assurance = is=20 provided to the end-user and frees the company to focus on its core=20 competencies. This enhances the company=E2=80=99s competitive advantage = as it is able to=20 achieve stringent Recovery Time Objective, minimise business and data = loss; and=20 enjoy uninterrupted services. The certification also serves as a quality = mark to=20 inspire service providers to upgrade themselves to provide better=20 services.=E2=80=9D

Read a press=20 release about SS507 and purchase a copy here.

0. Introduction

The ICT DR = Services=20 Model or Framework - showing the foundation layer to define supporting=20 infrastructure from which services are derived, such as policies, = processes,=20 programme, performance measurement, people and products.

1. Scope

Describes the purpose = of this=20 standard, assumptions made when using this standard and what is = excluded.=20 Introduces subsequent clauses and explains their = interpretation

2. Definitions

Defines terms = used within=20 the standard to establish a common understanding by the = readers.

3. General Guidelines

Basic = guidelines=20 for the ICT DR services provision:

3.1 Environmental = stability

3.2=20 Asset management

3.3 Proximity of services

3.4 = Subscription=20 (contention) ratio for shared services

3.5 Third party vendor=20 management

3.6 Outsourcing arrangements

3.7 Privacy and=20 confidentiality

3.8 Activation of subscribed = services

4. Disaster Recovery = Facilities

Specific=20 guidelines for the ICT DR services provision to provide a secure = physical=20 operating environment to facilitate recovery:

4.1 Physical access = control

4.2 Physical facilities and security

4.3 = Environmental=20 controls

4.4 Telecommunications

4.5 Power = supply

4.6 Cable=20 management

4.7 Fire protection

4.8 Location of recovery=20 site

4.9 Emergency operations centre

4.10 Restricted=20 facilities

4.11 Physical facilities and equipment = lifecycle

4.12=20 Non recovery amenities

4.13 Testing

4.14 Training and=20 education

5. Recovery Services=20 Capability

Specific guidelines for the ICT DR services = provision=20 to develop service delivery capability supporting recovery. Besides = qualified=20 staffing, other minimum capabilities include capacity to support = simultaneous=20 invocation of disasters:

5.1 Expertise

5.2 Logical access=20 controls

5.3 Equipment and operation readiness

5.4 = Simultaneous=20 recovery support

5.5 Levels of service

5.6 Types of=20 service

5.7 Client testing

5.8 Changes in = capability

5.9=20 Emergency response plan

5.10 Self-assessment

5.11 Disaster = recovery training and education

6.=20 Guidelines for Selection of Recovery Sites

Provides = guidelines on=20 the factors to consider when selecting recovery sites, such = as:

6.1=20 Infrastructure

6.2 Skilled manpower and support

6.3 = Critical mass=20 of vendors and suppliers

6.4 Local service providers=E2=80=99 = track=20 records

6.5 Proactive local support

7. Additional Guidelines for the = Professional ICT DR=20 Service Provider

Additional guidelines for professional = service=20 providers in the provision of ICT DR services.

From :=20 iso27001security.com

ISO/IEC=20 27011 Information technology

ISO/IEC 27011 Information technology -- Security techniques -- = Information=20 security management guidelines for telecommunications = (draft)

This=20 ISO/IEC 27001/ISO/IEC 27002 implementation guide for the telecomms = industry is=20 being developed jointly by ITU and ISO/IEC. It may be published jointly = as ITU-T=20 X.1051 and ISO/IEC 27011 but probably not until 2010.

ITU-T = Recommendation=20 X.1051 Information security management system =E2=80=93 Requirements for = telecommunications (ISMS-T) was originally published in English in = July=20 2004, followed by Spanish, French and Russian translations in 2005. It = is based=20 on the ISMS standards extant at that time i.e.:

*
ITU-T = Recommendation=20 X.800 (1991), Security architecture for Open Systems Interconnection for = CCITT=20 applications.
*
ITU-T Recommendation X.805 (2003), Security = architecture=20 for systems providing end-to-end communications.
*
ISO 9001:2000, = Quality=20 management systems =E2=80=93 Requirements.
*
ISO 14001:1996, = Environmental=20 management systems =E2=80=93 Specification with guidance for = use.
*
ISO/IEC=20 17799:2000, Information technology =E2=80=93 Code of practice for = information security=20 management (now known as ISO/IEC 27002).
*
ISO/IEC Guide 73:2002, = Risk=20 management =E2=80=93 Vocabulary =E2=80=93 Guidelines for use in = standards.
*
BS=20 7799-2:2002, Information Security Management Systems =E2=80=93 = Specification with=20 Guidance for use.

The summary states:

=E2=80=9CFor = telecommunications=20 organizations, information and the supporting processes, = telecommunications=20 facilities, networks and lines are important business assets. In order = for=20 telecommunications organizations to appropriately manage these business = assets=20 and to correctly and successfully continue their business activities,=20 information security management is extremely necessary. This = Recommendation=20 provides the requirements on information security management for=20 telecommunications organizations.

This Recommendation specifies = the=20 requirements for establishing, implementing, operating, monitoring, = reviewing,=20 maintaining and improving a documented information security management = system=20 (ISMS) within the context of the telecommunication's overall business = risks. It=20 specifies requirements for the implementation of security controls = customized to=20 the needs of individual telecommunications or parts = thereof.=E2=80=9D

From :=20 iso27001security.com

Subscribe to: Posts (Atom) =

ISMS

=E2=96=BC 2008=20 (6)=20
- =E2=96=BC January=20 (6)=20
  - =E2=96=BC Jan = 19=20 (2)=20
    - Information=20 Security Management Risks=20
    - Managing=20 Risk in Information Technology
  - =E2=96=BA Jan = 10=20 (4)=20
    - Create=20 Your Own Security Audit=20
    - BS7799-2=20 - the ISMS concept=20
    - ISMS=20 Implementation Guide [White Paper]=20
    - Protecting=20 your information assets =

=E2=96=BA 2007=20 (244)=20
- =E2=96=BA December=20 (4)=20
  - =E2=96=BA Dec = 19=20 (2)=20
    - Information=20 Security Management Handbook [Sixth Ed...=20
    - IT=20 Auditing: Using Controls to Protect Information... =
  - =E2=96=BA Dec = 05=20 (2)=20
    - Thinking=20 Through Your 2008 Security Budget=20
    - Demand=20 for ISO 27001 Grows
- =E2=96=BA November=20 (7)=20
  - =E2=96=BA Nov = 28=20 (2)=20
    - How=20 to Establish an ISMS Management Framework=20
    - Implementing=20 an Information Security Management Sy... =
  - =E2=96=BA Nov = 15=20 (2)=20
    - [PDF]=20 Analyzing Network Security using Malefactor ...=20
    - [PDF]=20 The Simple Information Security Audit Proces... =
  - =E2=96=BA Nov = 02=20 (3)=20
    - Certification=20 : BS 7799=20
    - Implementation=20 : BS7799=20
    - Key=20 Components of the Standard : BS 7799 (ISO 1779...=20
- =E2=96=BA October=20 (10)=20
  - =E2=96=BA Oct = 15=20 (2)=20
    - Sample=20 Security Policies=20
    - Sample=20 Security Policies
  - =E2=96=BA Oct = 07=20 (2)=20
    - Network=20 Security Audit Case Study=20
    - ISO=20 27001 Internal Audit Case Study
  - =E2=96=BA Oct = 03=20 (4)=20
    - Executive=20 Briefing On ISO 17799:2005 & ISO 27001:2...=20
    - The=20 benefits of ISO 27001:2005=20
    - Information=20 Technology Risk Assessment=20
    - A=20 Business Case for ISO 27001 / ISO 17799 / BS 779... =
  - =E2=96=BA Oct = 02=20 (2)=20
    - Sample=20 ISMS Policies & Guidelines Document=20
    - ISMS=20 Implementation Guide
- =E2=96=BA September=20 (37)=20
  - =E2=96=BA Sep = 25=20 (6)=20
    - Information=20 Security : Design, Implementation, Mea...=20
    - Information=20 Security Ebook: Protecting Your Busine...=20
    - The= =20 CB Audit process=20
    - What=20 Documents can I read to help me prepare for B...=20
    - What=20 is a CB Audit, and why should I undergo one?=20
    - How=20 does the BS7799 / ISO 27001 certification audi... =
  - =E2=96=BA Sep = 23=20 (2)=20
    - BS=20 7799 Certification=20
    - Information=20 Security Principles (ISO/IEC 17799)
  - =E2=96=BA Sep = 20=20 (3)=20
    - Eight=20 Tips for Working with a Consultant=20
    - ISO=20 17799: Standard for Security=20
    - SystemExperts=20 Launches Security Standard Complianc...
  - =E2=96=BA Sep = 12=20 (1)=20
    - Protection=20 of sensitive information and improving ... =
  - =E2=96=BA Sep = 11=20 (3)=20
    - HIPAA:=20 The Application and Challenges of Implement...=20
    - It=20 security and Risk Management : ISO 17799 [PDF]=20
    - ISO=20 17799 It's a control, not a standard
  - =E2=96=BA Sep = 09=20 (1)=20
    - Information=20 Security Management Handbook, Fifth Ed... =
  - =E2=96=BA Sep = 06=20 (3)=20
    - White=20 Paper on Information Security Auditing / Imp...=20
    - Information=20 Security Plan (Example)=20
    - Information=20 Security Policy - The University of Il... =
  - =E2=96=BA Sep = 05=20 (3)=20
    - E-Governance=20 Information Security Standard=20
    - Comparison=20 of Controls ISO/IEC 27001:2005 to ISO/I...=20
    - HIPAA=20 Security for Wireless Networks (Ebook)
  - =E2=96=BA Sep = 04=20 (2)=20
    - Enhancing=20 HIPAA Security Rule Compliance Efforts
  - =E2=96=BA Sep = 03=20 (1)
  - =E2=96=BA Sep = 02=20 (5)
  - =E2=96=BA Sep = 01=20 (7)
- =E2=96=BA August=20 (95)=20
  - =E2=96=BA Aug = 31=20 (2)
  - =E2=96=BA Aug = 30=20 (1)
  - =E2=96=BA Aug = 29=20 (7)
  - =E2=96=BA Aug = 28=20 (4)
  - =E2=96=BA Aug = 22=20 (4)
  - =E2=96=BA Aug = 21=20 (8)
  - =E2=96=BA Aug = 18=20 (3)
  - =E2=96=BA Aug = 16=20 (10)
  - =E2=96=BA Aug = 15=20 (5)
  - =E2=96=BA Aug = 14=20 (3)
  - =E2=96=BA Aug = 13=20 (3)
  - =E2=96=BA Aug = 09=20 (1)
  - =E2=96=BA Aug = 08=20 (11)
  - =E2=96=BA Aug = 06=20 (11)
  - =E2=96=BA Aug = 04=20 (7)
  - =E2=96=BA Aug = 03=20 (5)
  - =E2=96=BA Aug = 02=20 (7)
  - =E2=96=BA Aug = 01=20 (3)
- =E2=96=BA July=20 (88)=20
  - =E2=96=BA Jul = 31=20 (12)
  - =E2=96=BA Jul = 30=20 (10)
  - =E2=96=BA Jul = 29=20 (10)
  - =E2=96=BA Jul = 28=20 (7)
  - =E2=96=BA Jul = 26=20 (6)
  - =E2=96=BA Jul = 25=20 (14)
  - =E2=96=BA Jul = 24=20 (12)
  - =E2=96=BA Jul = 23=20 (3)
  - =E2=96=BA Jul = 21=20 (2)
  - =E2=96=BA Jul = 20=20 (2)
  - =E2=96=BA Jul = 19=20 (10) =
- =E2=96=BA June=20 (3)=20
  - =E2=96=BA Jun = 29=20 (2)
  - =E2=96=BA Jun = 19=20 (1)=20

------=_NextPart_001_002F_01C87DF7.E8A06900 Content-Type: application/octet-stream Content-Transfer-Encoding: quoted-printable Content-Location: http://www.blogger.com/navbar.g?targetBlogID=2884621962778620374&blogName=Information+Security+Management+System&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLACK&layoutType=LAYOUTS&homepageUrl=http%3A%2F%2Fisms-guide.blogspot.com%2F&searchRoot=http%3A%2F%2Fisms-guide.blogspot.com%2Fsearch =EF=BB=BF

Powiadom Bloggera o kontrowersyjnej zawarto=C5=9Bci tej strony.

Ten blog zosta=C5=82 oflagowany przez Ciebie = jako blog o kontrowersyjnej zawarto=C5=9Bci.

Information Security=20 Management System

Search in ISMS Guides