Implementing Information Security Based on ISO 27001/ISO 27002: A Management Guide

Information is the currency of the information age and in many cases is the most valuable asset possessed by an organization. Information security management is the discipline that focuses on protecting and securing these assets against the threats of natural disasters, fraud and other criminal activity, user error and system failure.

Effective information security can be defined as the 'preservation of confidentiality, integrity and availability of information.' This book describes the ap...