BS 7799 was a standard originally published by BSI Group in 1995.

The first part of BS 7799 was revised in 1998.

ISO/IEC 17799 was adopted by ISO as ISO/IEC 17799, "Information Technology - Code of practice for information security management." in 2000.

ISO/IEC 17799 was revised in June 2005 and finally incorporated in the ISO 27000 series of standards as ISO/IEC 27002 in July 2007. BS 7799 Part 2 was adopted by ISO as ISO/IEC 27001 in November 2005. BS 7799 Part 3 was published in 2005, covering risk analysis and management. It aligns with ISO/IEC 27001:2005.

BS 7799 Part 3 was published in 2005, covering risk analysis and management. It aligns with ISO/IEC 27001:2005.

BS 7799 Part 2 was adopted by ISO as ISO/IEC 27001 in November 2005.

ISO/IEC 27001 requires that management: Systematically examine the organization's information security risks, taking account of the threats, vulnerabilities, and impacts; Design and implement a coherent and comprehensive suite of information security controls and/or other forms of risk treatment (such as risk avoidance or risk transfer) to address those risks that are deemed unacceptable; and Adopt an overarching management process to ensure that the information security controls continue to meet the organization's information security needs on an ongoing basis.

ISO/IEC 17799 was revised in June 2005 and finally incorporated in the ISO 27000 series of standards as ISO/IEC 27002 in July 2007.

A SWOT analysis of the ISO/IEC 27001 certification process was conducted in 2020.

BS 7799 Part 3 was published in 2005, covering risk analysis and management. It aligns with ISO/IEC 27001:2005.