We have been thrown a curveball by one supplier who has asked whether our systems and data back-ups are subject to a fomalised security framework eg BS7799
Ive done a little research and basically its looking as though this is simply a raft of paperwork rather than hardware / software issues.
Can anyone give me some guidance on this area or point me to a decent resource?
