BS7799 - Information security consulting

In March 2002 There were approximately 97 companies worldwide who had achieved registration to BS7799, 52 of these being in the UK. from conversations with the accreditation bodies the uptake for this standard is increasing significantly and from my own experience on the BS7799 lead auditor couse 2 years ago the delegates came from as far afield as Japan and Hong Kong, highlighting, I beleive that the opportunities for consultancy are growing across the globe. Dissapointingly I have not seen any advertised vacancies within the consultancies (big 5 or other) requiring BS7799 consultancts. This is surely a niche offering right now, that should be exploited, before it becomes just another ISO9000, that anyone can offer.

Is this because the topic is misunderstood?

I have recently taken an IT Datacentre from a standing start to achieving BS7799 in the last 18 months, one of the most significant obstacles has been the perception that BS7799 is all about IT. Quite clearly this is a security standard applicable across all departments, yes it significantly affects IT departments but it isnt just IT.

Who is offering BS7799 consultancy from a business perspective?

(To those that are not quite up to speed with this standard, and are not yet offering consultancy in this area, you are missing a golden opportunity.)

If anyone has any advice or information in this area, please let me know.

Many thanks

SW

SW

I am a headhunter working on three BS5799 / IT Security Policy & Procedure Consultancy roles (including for one of the Big 5). Please give me call when easy to talk. Best Regards Jeremy Wilson 07802 237394

There are now 104 BS 7799 certificates issued and market is expanding at a tremendous rate. Many of these certificates are multi-site and therefore the amount of consultancy work involved is considerably more than the number first suggests. The amount of work out there is considerable, especially in the Far East. I have recently returned from Japan where I gave a lecture on BS 7799. The audience was over 800 and it was also broadcast live on the internet. Similar enthusiasm can be found in Korea, Taiwan, Singapore, Australia, Brazil and Hong Kong. The opportunities are global now that standard is internationally recognised. I'm surprised that you have not located any advertised positions, many of the IT security trade publications now carry 7799 related positions.

I'm currently working as a Security Consultant in the Middle East.

ISO17799 is gaining awareness here too. I have consulted with over 20 Enterprise Customers here in the Middle East.

The current political climate actually has highlighted the need for Information Security management. How is the demand in the Uk?

Which are the leading consultancies in this field?