From the NAO report on Connecting for Health: ...complies with the relevant international and British Standards ISO/IEC 17799:2000 and BS7799-2:2002. That'll be news to everyone whose auditors have told them that they had until Jul 2007 to upgrade their 7799 to ISO 27001 before 7799 lapsed... ian