Description (short summary):
The present report gives an overview of information security certifications of products, people and processes. It addresses common concepts, definitions, certifications of different types while clarifying the mandatory and legal background for some certifications. It also explores the analogies and disparities between a number of existing certification schemes. Finally, it analyses current trends in certification and offers six recommendations to improve network and information security in Europe through a wider use of security certification.

Original URL:
http://www.enisa.europa.eu/pages/02_01_press_2008_03_11_sec_cert.html

Number of pages:
20