ISMS for a country

["Jairo Pantoja Moncayo" <jpantoja () digiware com co>]

Hi all,

My country (Colombia) had launched a big project to design & implement an
ISMS for all its government organisms plus all ISPs and internet coffees
also. It is known that this implementation will be made through some legal
mechanisms like new laws, decrees (like habeas data, etc.), creating a new
organism like CERT also!

As for the security model concerns (policies, procedures, guidelines), the
Colombian government wishes to comply with the bests practices so the ISMS
will be good enough to be at the same level of 1st. world nations - European
community; and at the same time, be flexible and compatible to be applied to
all entity's universe (government, ISPs, internet coffees -telecenters). As
a member of the consultancy team, we think this security model must not be a
heavy model with many pages policies, etc... 

We want the valuable help from you all at the forum on which
recommendations, sources, best practices, success cases on another
countries, on how do we focus the creation of this very important project
for our country.

Thanks a lot for your valuable help!

Best regards,


Jairo Pantoja M., CISSP
jpantoja () digiware com co
Senior Consultant, IRCA ISO27001 Lead Auditor, ABCP, CCSE, CCSA
DIGIWARE S.A.
Colombia - Ecuador - Perú - USA

www.digiware.com.co
Calle 100 # 13 - 21 Of. 301
Teléfono: (+571)-5082220
Cel. 310-2107349
Fax. (+571)-5236634
Bogotá – Colombia

 "10 AÑOS ASEGURANDO SU INFORMACIÓN"

La información contenida en este mensaje y sus anexos tiene carácter
confidencial, y está dirigida únicamente al destinatario de la misma y sólo
podrá ser usada por éste. Si el lector de este mensaje no es el destinatario
del mismo, se le notifica que cualquier copia o distribución de éste se
encuentra totalmente prohibida. Si usted ha recibido este mensaje por error,
por favor notifique inmediatamente al remitente por este mismo medio y borre
el mensaje de su sistema. Las opiniones que contenga este mensaje son
exclusivas de su autor y no necesariamente representan la opinión oficial de
Digiware de Colombia S.A.

The information contained in this message and in any electronic files
annexed thereto is confidential, and is intended for the use of the
individual or entity to which it is addressed. If the reader of this message
is not the intended recipient, you are hereby notified that retention,
dissemination, distribution or copying of this e-mail is strictly
prohibited. If you received this e-mail in error, please notify the sender
immediately and destroy the original. Any opinions contained in this message
are exclusive of its author and not necessarily represent the official
position of Digiware de Colombia S.A.