Implementing the ISO/IEC 27001 Information Security Management System Standard

by Edward Humphreys

Overview

ISO/IEC 27000 is a critical series of information security technology standards that professionals need to be familiar with. ISO/IEC 27001 is the newest release in this series and today's practitioners will have to come up to speed with this standard for their current and future projects. Authored by an internationally recognized expert in the field, this timely book provides professionals with an authoritative and clear guide to the ISO/IEC 27000 security standards and their implementation, focusing on the recent ISO/IEC 27001. The book addresses all the critical information security management issues that practitioners need to understand to help them protect their business's valuable assets, including dealing with business risks and governance and compliance. Moreover, this resource offers practical information on standard accreditation and certification.

Product Details

ISBN-13:	9781596931725
Publisher:	Artech House, Incorporated
Publication date:	08/31/2007
Series:	Artech House Information Security and Privacy Series
Pages:	286
Product dimensions:	6.14(w) x 9.21(h) x 0.69(d)

About the Author

Edward Humphreys is director of XiSEC Consultants Ltd., a company providing information security management consultancy services around the world. Mr. Humphreys has been an expert in the field of IT and information security for over 30 years. During this time, he has worked for major international companies, as well as organizations and institutions, such as the European Commission, Council of Europe and the OECD.

Table of Contents

Introduction
Business and the Information Society
Information Security
The ISO/IEC 27000 Series of Standards
ISMS Design
Implementing and Deploying the ISMS
Monitoring and Reviewing the ISMS
Keeping the ISMS Up to Date
Accreditation and Certification
ISMS Business Case Studies
ISMS Checklists and Benchmarking