Information security management requirements ISO/IEC27001 was formerly known as the British BS7799 standard, which was proposed by the British Standards Institution (BSI) in February 1995 and revised in May 1995. BSI revised the standard again in 1999. BS7799 is divided into two parts: BS7799-1, Information Security Management Implementation Rules BS7799-2, Information Security Management System Specifications. The first part gives advice on information security management for use by those responsible for initiating, implementing or maintaining security in their organizations; the second part describes the requirements for establishing, implementing and documenting an information security management system (ISMS), and specifies the requirements for security controls that should be implemented according to the needs of independent organizations.