ISO/IEC 27001:2022
An introduction to information security and the ISMS standard
1st Edition
Published on 15. November 2022
50 pages
978-1-78778-404-8 (ISBN)
Description
Written by an acknowledged expert on the ISO/IEC 27001 Standard, ISO 27001:2022 - An Introduction to information security and the ISMS standard is an ideal primer for anyone implementing an information security management system aligned to ISO 27001:2022.
The guide is a must-have resource giving a clear, concise and easy-to-read introduction to information security, providing guidance to ensure the management systems you put in place are effective, reliable and auditable.
This pocket guide will help you to:
Make informed decisions
Using this guide will enable the key employees in your organisation to make better decisions before embarking on an information security project.
Ensure everyone is up to speed
This guide will give the non-specialists on the project board and in the project team a clearer understanding of what an information security management system involves, reflecting the ISO 27001:2022 version of the Standard.
Raise awareness among staff
Ensure that your staff know what is at stake with regard to information security and understand what is expected of them with this pocket guide.
Enhance your competitiveness
Use this guide to begin your ISO 27001:2022 implementation journey and let your customers know that the information you hold about them is managed and protected appropriately.
Get up to speed with the ISO 27001:2022 updates and keep your information secure
About the author:
Steve is a Director of Kinsnall Consulting Ltd, providing board-level advice on cyber security and related standards.
Steve is an active member of SC 27, the international committee responsible for cyber security, information security and privacy protection standards, including the ISO 27001 family. He Chairs the UK national committee (IST 33) that mirrors SC 27 and is the Chair of the UK ISO/IEC 27001 User Group.
He is also a contracted ISMS and ITSMS Technical Assessor for UKAS, supporting the assessment of certification bodies offering accredited certification to ISO/IEC 27001 and ISO/IEC 20000-1.
TOC:
Introduction
Chapter 1: Information security - What's that?
Chapter 2: It's not IT
Chapter 3: ISO 27001 and the management system requirements
Chapter 4: Legal, regulatory and contractual requirements and business risk
Chapter 5: Information security controls
Chapter 6: Certification
Chapter 7: Signposting
Further reading
The guide is a must-have resource giving a clear, concise and easy-to-read introduction to information security, providing guidance to ensure the management systems you put in place are effective, reliable and auditable.
This pocket guide will help you to:
Make informed decisions
Using this guide will enable the key employees in your organisation to make better decisions before embarking on an information security project.
Ensure everyone is up to speed
This guide will give the non-specialists on the project board and in the project team a clearer understanding of what an information security management system involves, reflecting the ISO 27001:2022 version of the Standard.
Raise awareness among staff
Ensure that your staff know what is at stake with regard to information security and understand what is expected of them with this pocket guide.
Enhance your competitiveness
Use this guide to begin your ISO 27001:2022 implementation journey and let your customers know that the information you hold about them is managed and protected appropriately.
Get up to speed with the ISO 27001:2022 updates and keep your information secure
About the author:
Steve is a Director of Kinsnall Consulting Ltd, providing board-level advice on cyber security and related standards.
Steve is an active member of SC 27, the international committee responsible for cyber security, information security and privacy protection standards, including the ISO 27001 family. He Chairs the UK national committee (IST 33) that mirrors SC 27 and is the Chair of the UK ISO/IEC 27001 User Group.
He is also a contracted ISMS and ITSMS Technical Assessor for UKAS, supporting the assessment of certification bodies offering accredited certification to ISO/IEC 27001 and ISO/IEC 20000-1.
TOC:
Introduction
Chapter 1: Information security - What's that?
Chapter 2: It's not IT
Chapter 3: ISO 27001 and the management system requirements
Chapter 4: Legal, regulatory and contractual requirements and business risk
Chapter 5: Information security controls
Chapter 6: Certification
Chapter 7: Signposting
Further reading
More details
Language
English
Place of publication
Ely
United Kingdom
Target group
Professional and scholarly
US School Grade: College Graduate Student
File size
0,64 MB
ISBN-13
978-1-78778-404-8 (9781787784048)
Copyright in bibliographic data and cover images is held by Nielsen Book Services Limited or by the publishers or by their respective licensors: all rights reserved.
Schweitzer Classification
Other editions
Additional editions
Book
11/2022
IT Governance Publishing
€17.40
Shipment within 10-20 days
E-Book
11/2022
1st Edition
IT Governance Publishing
€11.99
Available for download
Persons
Steve G Watkins is a Director of Kinsnall Consulting Ltd, providing board-level advice on cyber security and related standards.
Steve is an active member of SC 27, the international committee responsible for cyber security, information security and privacy protection standards, including the ISO 27001 family. He chairs the UK national committee (IST 33) that mirrors SC 27, and is the Chair of the UK ISO/IEC 27001 User Group.
He is also a contracted ISMS and ITSMS Technical Assessor for UKAS, supporting the assessment of certification bodies offering accredited certification to ISO/IEC 27001 and ISO/IEC 20000-1.
Steve is an active member of SC 27, the international committee responsible for cyber security, information security and privacy protection standards, including the ISO 27001 family. He chairs the UK national committee (IST 33) that mirrors SC 27, and is the Chair of the UK ISO/IEC 27001 User Group.
He is also a contracted ISMS and ITSMS Technical Assessor for UKAS, supporting the assessment of certification bodies offering accredited certification to ISO/IEC 27001 and ISO/IEC 20000-1.
Content
Introduction
Chapter 1: Information security - What's that?
Chapter 2: It's not IT
Chapter 3: ISO 27001 and the management system requirements
Chapter 4: Legal, regulatory and contractual requirements and business risk
Chapter 5: Information security controls
Chapter 6: Certification
Chapter 7: Signposting
Further reading
Chapter 1: Information security - What's that?
Chapter 2: It's not IT
Chapter 3: ISO 27001 and the management system requirements
Chapter 4: Legal, regulatory and contractual requirements and business risk
Chapter 5: Information security controls
Chapter 6: Certification
Chapter 7: Signposting
Further reading
