ISO 27001/ISO 27002: A guide to information security management systems
About this ebook
- Covers both ISO 27001 requirements and ISO 27002 guidance in depth
- Explains ISMS implementation using real-world context and examples
- Clarifies certification process and Annex A controls mapping
- Define key ISO 27001 and ISO 27002 terms and structures
- Apply the Plan-Do-Check-Act cycle to ISMS processes
- Interpret ISO 27001 clause requirements for compliance
- Implement controls listed in Annex A effectively
- Distinguish between 'shall' and 'should' in ISO standards
- Prepare for ISO 27001 accredited certification audits
This book is ideal for information security professionals, compliance officers, auditors, and IT managers seeking to implement or audit ISO 27001/27002 standards. Readers should have a basic understanding of risk management and information security principles.
About the author
IT Governance Publishing (ITGP) is the world's only specialist IT governance publisher. We produce books, toolkits and training aids on a wide range of topics including information security, IT governance, information risk, compliance, cyber security, IT service management, project management and management system standards.
Alan Calder is the Group CEO of GRC International Group PLC, the AIM-listed company that owns IT Governance Ltd. Alan is an acknowledged international Cyber Security Guru, and a leading Author on Information Security and IT Governance issues. He has been involved in the development of a wide range of Information Security Management training courses that have been accredited by IBITGQ (International Board for IT Governance Qualifications). Alan has consulted for clients across the globe and is a regular Media Commentator and Speaker.
