Is ITIL a security standard?

Dear Mr Wizard

Our auditors have expressed concern about the lack of security controls in our computing environment. Is ITIL a security standard we should apply?

Lisa G.

Dear Lisa

No. ITIL is THE security standard. With ITIL V3, Information Security Management is now a rigorous set of processes you can apply to lock down your data.

As Service Operations says (5.13, p101) ITIL's Information Security Management is there to "ensure the protection of the organisation's assets, data , information and IT Services".

Even the US military use ITIL for security management - can't get a better validation than that!

Good luck
The ITIL Wizard

Syndicate content