Is ITIL a security standard?

Submitted by Visitor on Tue, 2009-09-29 21:32
Share this post with

Dear Mr Wizard

Our auditors have expressed concern about the lack of security controls in our computing environment. Is ITIL a security standard we should apply?

Thanks
Lisa G.

Dear Lisa

No. ITIL is THE security standard. With ITIL V3, Information Security Management is now a rigorous set of processes you can apply to lock down your data.

As Service Operations says (5.13, p101) ITIL's Information Security Management is there to "ensure the protection of the organisation's assets, data , information and IT Services".

Even the US military use ITIL for security management - can't get a better validation than that!

Good luck
The ITIL Wizard

Published in The Skeptical Informer, September 2009, Volume 3, No. 7


Syndicate content