A standard written by British commerce, government and industry stakeholders to address information security management issues, including fraud, industrial espionage and physical disaster. Today, there are three parts to the standard. Part one became ISO/IEC 17799, Information technology—Code of practice for information security management. BS 7799 Part 2 focuses on information security management systems. BS 7799 Part 3 covers risk analysis and management.