This book is ideal for cybersecurity professionals, compliance officers, risk managers, and IT auditors who are responsible for implementing or aligning cybersecurity frameworks. Readers should have a foundational understanding of information security concepts, risk assessment, and cybersecurity controls.
IT Governance Publishing (ITGP) is the world's only specialist IT governance publisher. We produce books, toolkits and training aids on a wide range of topics including information security, IT governance, information risk, compliance, cyber security, IT service management, project management and management system standards.
Andrew Pattison is the Global Head of GRC and PCI Consultancy at GRC International Group. He has been working in Information Security, Risk Management, and Business Continuity since the Mid-1990s, helping large international organizations across many sectors. Andrew is a Certified Auditor, as well as holding CISM® and CRISC® certifications. He has provided extensive training in multiple GRC fields and is an Approved APMG Trainer.