Department of Trade and Industry: Communications and Information Industries Directorate:...

The records consist of standard departmental files with papers covering either:

(i) matters arising following the publication in 1995 of British Standard BS7799 (Code of Practice for Information Security Management): CII staff chaired the BSI Committee BDD/2 which dealt with the review of, and revisions to, BS7799; CII also had significant input to the development and launch of a scheme for accredited certification against BS7799; or

(ii) general IT security matters, including cryptography/encryption issues in the form of the development of the Secure Electronic Commerce Bill (later the Electronic Communications Bill): CII were in the lead on policy on, and development of, the Bill; ITD were involved in the development in the early 1990s of the UK IT Security Evaluation and Certification Scheme, and in the work of the Scheme Management Board, for which ITD provided the co-chairman.

• Department of Trade and Industry, Communications and Information Industries Directorate, 1992-2000
• Department of Trade and Industry, Information Technology Division, 1989-1992

in 2015 Department for Business, Innovation and Skills

Topics

Trade and commerce

By October 1992 Information Technology Division (ITD) had become part of Information and Manufacturing Technologies Division whose remit included policy for commercial IT security, including standards, evaluation and certification. In May 1996 Communications and Information Industries Directorate (CII) contained the Information Security Policy Unit (ISPU) whose remit included the promotion of best practice in and awareness of information security for business, the development of UK cryptography policy, the Application of Computer Misuse Act 1990, and advice on security on the Internet; by July 1999 the ISPU had become the Information Security Policy Group, still within CII, and still with responsibility for the above aspects.