Information security standards focus on the existence of process, not its content

Also Consider

Synapse has enriched 5 closely related papers on similar clinical questions. Consider them for comparative context:

1. 1Information security management: why standards are important1999 · 130 citations
2. 2Standards — The need for a common framework1995 · 4 citations
3. 3A conceptual foundation for organizational information security awareness2000 · 616 citations
4. 4Information security management (3): the Code of Practice for Information Security Management (BS 7799)1998 · 55 citations
5. 5The role of commitment in software process improvement2002 · 36 citations