This forthcoming standard covers information security risk management, and is expected to embrace BS7799-3, as well as MICTS-2 (currently ISO 13335).

As with the other new standards, no firm date has been set, although we are probably looking at 2007 at the earliest and probably 2008.