How to Achieve 27001 Certification: An Example of Applied Compliance Management, 1st Edition (Paperback) book cover

How to Achieve 27001 Certification

An Example of Applied Compliance Management, 1st Edition

By Sigurjon Thor Arnason, Keith D. Willett

Auerbach Publications

352 pages

Purchasing Options:$ = USD
Paperback: 9780367388171
pub: 2019-09-19
SAVE ~$14.99
$74.95
$59.96
x
Hardback: 9780849336485
pub: 2007-11-28
SAVE ~$24.00
$120.00
$96.00
x
eBook (VitalSource) : 9780429133039
pub: 2007-11-28
from $37.48


FREE Standard Shipping!

Description

The security criteria of the International Standards Organization (ISO) provides an excellent foundation for identifying and addressing business risks through a disciplined security management process. Using security standards ISO 17799 and ISO 27001 as a basis, How to Achieve 27001 Certification: An Example of Applied Compliance Management helps an organization align its security and organizational goals so it can generate effective security, compliance, and management programs.

The authors offer insight from their own experiences, providing questions and answers to determine an organization's information security strengths and weaknesses with respect to the standard. They also present step-by-step information to help an organization plan an implementation, as well as prepare for certification and audit.

Security is no longer a luxury for an organization, it is a legislative mandate. A formal methodology that helps an organization define and execute an ISMS is essential in order to perform and prove due diligence in upholding stakeholder interests and legislative compliance. Providing a good starting point for novices, as well as finely tuned nuances for seasoned security professionals, this book is an invaluable resource for anyone involved with meeting an organization's security, certification, and compliance needs.

Table of Contents

Introduction. Information Security Standards. Analyzing the Status of you Organization with Respect to the Standard. Implementing the Standard. Audit and Certification.

About the Authors

Arnason, Sigurjon Thor; Willett, Keith D.

Subject Categories

BISAC Subject Codes/Headings:
COM032000
COMPUTERS / Information Technology
COM053000
COMPUTERS / Security / General