ISO 27001 Controls: Mastering ISO 27001: A Step-by-Step Guide to Effective Implementation and Auditing
About this ebook
- A comprehensive guide to ISO 27001 control implementation.
- Practical steps for auditing information security management systems.
- Real-world applications of organizational, physical, and technological security controls.
- Develop skills to audit the security measures within an organization.
- Gain expertise in managing physical and technological controls.
- Implement and monitor information security policies effectively.
- Understand how to handle and mitigate security incidents.
- Master compliance strategies for information security audits.
- Learn the best practices for risk management in information security.
This book is ideal for security managers, compliance officers, and auditors who are responsible for ensuring the effective implementation and auditing of ISO/IEC 27001 controls within an organization. A basic understanding of information security principles and the ISO 27001 framework is beneficial, though not mandatory. The book offers a structured approach, making it accessible to both beginners and professionals with some experience in auditing or information security.
About the author
IT Governance Publishing (ITGP) is the world's only specialist IT governance publisher. We produce books, toolkits and training aids on a wide range of topics including information security, IT governance, information risk, compliance, cyber security, IT service management, project management and management system standards.
Bridget Kenyon is the Chief Information Security Officer for SSCL. She is responsible for managing strategy and information security activities for the whole organisation, including internal and customer-facing elements. In parallel to her main role, Bridget has been on the ISO editing team for ISMS standards since 2006; she has served as Lead Editor for ISO/IEC 27001:2022 and ISO/IEC 27014:2020. Joining DERA in 2000 to work on network vulnerabilities, Bridget discovered her passion for information and cyber security. Following this, she has been a Qualified Security Assessor against PCI DSS, Head of Information Security for UCL, and has held operational and consultancy roles in both industry and academia. She is a member of the UK Advisory Council for ISC2, and a Fellow of the Chartered Institute of Information Security. Bridget's interests lie in finding the edges of security which you can peel up, and the human aspects of system vulnerability. She's the sort of person who will always have a foot in both the technical and strategy camps. She enjoys helping people to find solutions to thorny problems, and strongly believes that cyber and information security are fundamental to resilient business operations, not “nice to haves".
