ISO27001 in a Windows Environment

Introduction Chapter 1: Information and Information Security Information security concepts Other information security concepts The importance of information security Chapter 2: Using an ISMS to Counter the Threats System security versus information security The structure of an ISMS Managing exceptions to the policy Chapter 3: An Introduction to ISO27001 The ISO27000 standards family History of ISO27001 What is in the ISO27001 standard? The plan, do, check and act cycle (PDCA) What are the benefits of ISO27001? Chapter 4: Identify your Information Assets Define the scope of the ISMS Identifying your information security assets Chapter 5: Conducting a Risk Assessment What is risk? Managing risks The different types of risk analysis Risk management tools Chapter 6: An Overview of Microsoft Technologies Microsoft(R) Windows Server(R) 2008 Microsoft(R) Windows(R) 7 Microsoft(R) Forefront Microsoft(R) Systems Center Microsoft(R) Windows Server(R) Update Services Microsoft(R) Baseline Security Analyzer Contents Microsoft Security Risk Management Guide Microsoft(R) Threat Analysis and Modeling Enterprise Edition Microsoft(R) CAT.NET Microsoft(R) Source Code Analyzer for SQL Injection Chapter 7: Implementing ISO27001 in a Microsoft environment Section 4 Information security management system Section A.5 Security policy Section A.6 Organisational security Section A.7 Asset management Section A.8 Human resource security Section A.9 Physical and environmental security Section A.10 Communications and operations management Section A.11 Access control Section A.12 Information systems acquisition development and maintenance Section A.13 Information security incident management Section A.14 Business continuity management Section A.15 Compliance Chapter 8: Securing the Windows(R) environment Windows Server(R) 2008 architecture Domain user accounts naming standards Chapter 9: Securing the Microsoft(R) Windows Server(R) platform Recommended settings Chapter 10: Auditing and Monitoring Configuring auditing of file and resource access Event log settings Events to record Chapter 11: Securing your Servers Contents Protecting files and directories Appendix 1: Overview of security settings for Windows Server(R) 2008 servers and domain controllers Service pack and hotfixes Account and audit policies Event log settings Security settings Service settings User rights Registry permissions File and registry auditing Appendix 2: Bibliography, Reference and Further Reading ISO27001 resources Microsoft resources Microsoft products Other resources ITG Resources