How to Achieve 27001 Certification: An Example of Applied Compliance Management

Overview

The security criteria of the International Standards Organization (ISO) provides an excellent foundation for identifying and addressing business risks through a disciplined security management process. Using security standards ISO 17799 and ISO 27001 as a basis, How to Achieve 27001 Certification: An Example of Applied Compliance Management helps an organization align its security and organizational goals so it can generate effective security, compliance, and management ...

See more details below
Other sellers (Hardcover)
  • All (6) from $88.66   
  • New (3) from $88.66   
  • Used (3) from $90.21   
Sending request ...

Overview

The security criteria of the International Standards Organization (ISO) provides an excellent foundation for identifying and addressing business risks through a disciplined security management process. Using security standards ISO 17799 and ISO 27001 as a basis, How to Achieve 27001 Certification: An Example of Applied Compliance Management helps an organization align its security and organizational goals so it can generate effective security, compliance, and management programs.

The authors offer insight from their own experiences, providing questions and answers to determine an organization's information security strengths and weaknesses with respect to the standard. They also present step-by-step information to help an organization plan an implementation, as well as prepare for certification and audit.

Security is no longer a luxury for an organization, it is a legislative mandate. A formal methodology that helps an organization define and execute an ISMS is essential in order to perform and prove due diligence in upholding stakeholder interests and legislative compliance. Providing a good starting point for novices, as well as finely tuned nuances for seasoned security professionals, this book is an invaluable resource for anyone involved with meeting an organization's security, certification, and compliance needs.

Read More Show Less

Product Details

  • ISBN-13: 9780849336485
  • Publisher: Taylor & Francis
  • Publication date: 12/7/2007
  • Pages: 352
  • Product dimensions: 6.30 (w) x 9.20 (h) x 0.90 (d)

Table of Contents

INTRODUCTION
ISO SECURITY STANDARDS
INTERNATIONAL SECURITY ORGANIZATION (ISO) SECURITY STANDARD CERTIFICATION
GOALS
OUTLINE AND FLOW
COMMENTARY

INTRODUCTION TO ISO SECURITY STANDARDS
OBJECTIVES
CORNERSTONES OF INFORMATION SECURITY
THE HISTORY OF ISO INFORMATION SECURITY STANDARDS
INFORMATION SECURITY STANDARDS ROADMAP AND
NUMBERING
INTERNATIONAL SECURITY MANAGEMENT STANDARDS
OTHER PROPOSED INFORMATION SECURITY STANDARDS
INTRODUCTION TO THE ISO/IEC 27001 STANDARD
INTRODUCTION TO THE ISO 17799 STANDARD
RELATIONSHIP BETWEEN ISO 27001 AND THE ISO 17799
RELATIONSHIP TO OTHER MANAGEMENT STANDARDS
PDCA AND SECURITY STANDARDS CROSS REFERENCE

INFORMATION SECURITY MANAGEMENT SYSTEM (ISMS)
OBJECTIVES
ISMS INTRODUCTION
SECURITY MANAGEMENT FRAMEWORK (SMF)
INTRODUCTION
ISMS ESTABLISHMENT PROCESS…TO-BE OR PDCA

FOUNDATIONAL CONCEPTS AND TOOLS FOR AN ISMS
OBJECTIVES
SMF APPLICATIONS
ISMS INITIAL PLANNING AND IMPLEMENTATION
ESTABLISHING CURRENT STATUS OF ORGANIZATIONAL SECURITY MANAGEMENT (ASSESSMENT PROCESS)
ANALYSIS OF DISCOVERY RESULTS
AN INITIAL VIEW OF DEVELOPING AN ISMS

IMPLEMENTING AN INFORMATION SECURITY MANAGEMENT SYSTEM (ISMS) - PDCA
OBJECTIVES
ISMS DEFINITION
PDCA MODEL
PLAN PHASE
DO PHASE
CHECK PHASE
ACT PHASE
SUMMARY OF IMPLEMENTING THE ISMS

AUDIT AND CERTIFICATION
OBJECTIVES
CERTIFICATION PROCESS OVERVIEW
SELECTING AN ACCREDITED CERTIFICATION BODY
CERTIFICATION PREPARATION CHECKLIST
THE AUDIT STAGE PROCESS

COMPLIANCE MANAGEMENT
OBJECTIVES
INTRODUCTION TO COMPLIANCE MANAGEMENT
IA COMPLIANCE MANAGEMENT PROGRAM
CONCLUSION AND COMMENTARY

APPENDIX A: ISMS ASSESSMENT DISCOVERY QUESTION SET

APPENDIX B: SAMPLE STATEMENT OF APPLICABILITY (SOA)

APPENDIX C: PDCA GUIDELINE DOCUMENTS - OUTLINES
ISMS - PLAN PHASE GUIDELINES-DOCUMENT OUTLINE
ISMS - DO PHASE GUIDELINES-DOCUMENT OUTLINE
ISMS - CHECK PHASE GUIDELINES-DOCUMENT OUTLINE
ISMS - ACT PHASE GUIDELINES-DOCUMENT OUTLINE

APPENDIX D: POLICY, STANDARD, AND PROCEDURE SAMPLE TEMPLATES
SAMPLE POLICY TEMPLATE
SAMPLE STANDARD TEMPLATE
SAMPLE PROCEDURE TEMPLATE

APPENDIX E: ISMS POLICY AND RISK TREATMENT TEMPLATES
ISMS POLICY TEMPLATE
RISK TREATMENT TEMPLATE

APPENDIX F: PROJECT DEFINITION TEMPLATE

USEFUL BITS OF KNOWLEDGE (UBOKS)

GLOSSARY

REFERENCES

INDEX

Read More Show Less

Customer Reviews

Be the first to write a review
( 0 )
Rating Distribution

5 Star

(0)

4 Star

(0)

3 Star

(0)

2 Star

(0)

1 Star

(0)

Your Rating:

Your Name: Create a Pen Name or

Barnes & Noble.com Review Rules

Our reader reviews allow you to share your comments on titles you liked, or didn't, with others. By submitting an online review, you are representing to Barnes & Noble.com that all information contained in your review is original and accurate in all respects, and that the submission of such content by you and the posting of such content by Barnes & Noble.com does not and will not violate the rights of any third party. Please follow the rules below to help ensure that your review can be posted.

Reviews by Our Customers Under the Age of 13

We highly value and respect everyone's opinion concerning the titles we offer. However, we cannot allow persons under the age of 13 to have accounts at BN.com or to post customer reviews. Please see our Terms of Use for more details.

What to exclude from your review:

Please do not write about reviews, commentary, or information posted on the product page. If you see any errors in the information on the product page, please send us an email.

Reviews should not contain any of the following:

  • - HTML tags, profanity, obscenities, vulgarities, or comments that defame anyone
  • - Time-sensitive information such as tour dates, signings, lectures, etc.
  • - Single-word reviews. Other people will read your review to discover why you liked or didn't like the title. Be descriptive.
  • - Comments focusing on the author or that may ruin the ending for others
  • - Phone numbers, addresses, URLs
  • - Pricing and availability information or alternative ordering information
  • - Advertisements or commercial solicitation

Reminder:

  • - By submitting a review, you grant to Barnes & Noble.com and its sublicensees the royalty-free, perpetual, irrevocable right and license to use the review in accordance with the Barnes & Noble.com Terms of Use.
  • - Barnes & Noble.com reserves the right not to post any review -- particularly those that do not follow the terms and conditions of these Rules. Barnes & Noble.com also reserves the right to remove any review at any time without notice.
  • - See Terms of Use for other conditions and disclaimers.
Search for Products You'd Like to Recommend

Recommend other products that relate to your review. Just search for them below and share!

Create a Pen Name

Your Pen Name is your unique identity on BN.com. It will appear on the reviews you write and other website activities. Your Pen Name cannot be edited, changed or deleted once submitted.

 
Your Pen Name can be any combination of alphanumeric characters (plus - and _), and must be at least two characters long.

Continue Anonymously

    If you find inappropriate content, please report it to Barnes & Noble
    Why is this product inappropriate?
    Comments (optional)