Anyone looking for clarification should contact BSI, they wrote the standard and I believe are the registrar for 95% of the companies that have ISO:IEC 27001:2005 certification - we utilized them at Interactive Data. From a high level, ISO 17799 now…