Mastering Information Security Compliance Management: A comprehensive handbook on ISO/IEC 27001:2022 compliance
Author: Adarsh Nair (Author), Greeshma M. R. (Author)
Publisher finelybook 出版社: Packt Publishing
Publication Date 出版日期: 2023-08-11
Language 语言: English
Print Length 页数: 236 pages
ISBN-10: 1803231173
ISBN-13: 9781803231174
Book Description
Strengthen your ability to implement, assess, evaluate, and enhance the effectiveness of information security controls based on ISO/IEC 27001/27002:2022 standards
Purchase of the print or Kindle book includes a free PDF eBook
Key Features
- Familiarize yourself with the clauses and control references of ISO/IEC 27001:2022
- Define and implement an information security management system aligned with ISO/IEC 27001/27002:2022
- Conduct management system audits to evaluate their effectiveness and adherence to ISO/IEC 27001/27002:2022
Book Description
ISO 27001 and ISO 27002 are globally recognized standards for information security management systems (ISMSs), providing a robust framework for information protection that can be adapted to all organization types and sizes. Organizations with significant exposure to information-security–related risks are increasingly choosing to implement an ISMS that complies with ISO 27001. This book will help you understand the process of getting your organization’s information security management system certified by an accredited certification body.
The book begins by introducing you to the standards, and then takes you through different principles and terminologies. Once you completely understand these standards, you’ll explore their execution, wherein you find out how to implement these standards in different sizes of organizations. The chapters also include case studies to enable you to understand how you can implement the standards in your organization. Finally, you’ll get to grips with the auditing process, planning, techniques, and reporting and learn to audit for ISO 27001.
By the end of this book, you’ll have gained a clear understanding of ISO 27001/27002 and be ready to successfully implement and audit for these standards.
What you will learn
- Develop a strong understanding of the core principles underlying information security
- Gain insights into the interpretation of control requirements in the ISO 27001/27002:2022 standard
- Understand the various components of ISMS with practical examples and case studies
- Explore risk management strategies and techniques
- Develop an audit plan that outlines the scope, objectives, and schedule of the audit
- Explore real-world case studies that illustrate successful implementation approaches
Who this book is for
This book is for information security professionals, including information security managers, consultants, auditors, officers, risk specialists, business owners, and individuals responsible for implementing, auditing, and administering information security management systems. Basic knowledge of organization-level information security management, such as risk assessment, security controls, and auditing, will help you grasp the topics in this book easily.
Table of Contents
- Foundations, Standards, and Principles of Information Security
- Introduction to ISO 27001
- ISMS Controls
- Risk Management
- ISMS – Phases of Implementation
- Information Security Incident Management
- Case Studies – Certification, SoA, and Incident Management
- Audit Principles, Concepts, and Planning
- Performing an Audit
- Audit Reporting, Follow-Up, and Strategies for Continual Improvement
- Auditor Competence and Evaluation
- Case Studies – Audit Planning, Reporting Nonconformities, and Audit Reporting
Review
“For those interested to play the role of ISMS auditor, the book offers insights into the qualities and competencies required for the profession. Written in easy-to-follow style with neat presentation of the concepts, this book offers insights into the ISMS implementation guidance. The book introduces the ISO standard and proceeds to delve deeper into the various design and implementation topics – ISMS controls, risk management, implementation phases and incident management. The authors wrap up with a detailed coverage of how to sustain the program with monitoring and measuring the ISMS through audits – planning, conducting, and reporting to management. The cases studies detailed across the chapters are a great way to reinforce the concepts with practical flavour of how it is done in real world situations. For sure, this book “Mastering Information Security Compliance Management” is an essential guide for 1SO 27001:2022 compliance and those looking for gaining knowledge will find this book useful.”
—
Dr. Ram Kumar G, PhD, CISM, CRISC, ISO 27001 ISMS Lead Auditor
Cyber Security & Risk Leader
Global Automotive Major
About the Author
Greeshma M. R. is an entrepreneur and seasoned freelance technology writer, specializing in technology domains, especially information security and Web 3.0. She is interested in exploring the intersection of technology and humanity, as well as the social aspects of technology. Her areas of interest also encompass innovation, sustainable development, gender, and society. She is a co-author and publisher of two books and holds a certification as an ISO 27001 Lead Auditor.Having worked in the IT and knowledge and innovation management domains, Greeshma possesses an interdisciplinary perspective that enriches her approach. She has actively contributed to establishing an innovation ecosystem among students via communities of practice, fostering a culture of creativity and collaboration.
相关推荐
Advanced Cyber Security Techniques for Data, Blockchain, IoT, and Network Protection- AUTOSAR Fundamentals and Applications: Establishing a solid foundation for automotive software design with AUTOSAR
- Embracing DevOps Release Management: Strategies and tools to accelerate continuous delivery and ensure quality software deployment
- Go Recipes for Developers: Top techniques and practical solutions for real-life Go programming problems
- Outlier Detection in Python
- Real-World Web Development with .NET 9: Build websites and services using mature and proven ASP.NET Core MVC, Web API, and Umbraco CMS
