Implementing Information Security Based on ISO 27001/ISO 27002 : A Management Guide

Alan Calder

ISBN 10: 9087535414 / ISBN 13: 9789087535414

Editore: Van Haren Publishing BV Jul 2009, 2009

Riguardo questo articolo

Neuware - Information is the currency of the information age and in many cases is the most valuable asset possessed by an organisation. Information security management is the discipline that focuses on protecting and securing these assets against the threats of natural disasters, fraud and other criminal activity, user error and system failure.Effective information security can be defined as the 'preservation of confidentiality, integrity and availability of information.' This book describes the approach taken by many organisations to realise these objectives. It discusses how information security cannot be achieved through technological means alone, but should include factors such as the organisation's approach to risk and pragmatic day-to-day business operations.This Management Guide provides an overview of the implementation of an Information Security Management System that conforms to the requirements of ISO/IEC 27001:2005 and which uses controls derived from ISO/IEC 17799:2005. It covers the following: CertificationRiskDocumentation and Project Management issuesProcess approach and the PDCA cyclePreparation for an Audit.

Codice articolo 9789087535414

Dati bibliografici

• Titolo: Implementing Information Security Based on ISO 27001/ISO 27002 : A Management Guide
• Editore: Van Haren Publishing BV Jul 2009
• Data di pubblicazione: 2009
• Lingua: Inglese
• ISBN 10: 9087535414
• ISBN 13: 9789087535414
• Rilegatura: Taschenbuch
• Edizione: seconda edizione
• Condizione: Neu
• Dimensioni: 209 L x 148 A x 8 P (millimetri) 209 millimetri di larghezza per 148 millimetri di altezza per 8 millimetri di profondità
• Peso: 167 grammi

Descrizione articolo

Riassunto

Information is the currency of the information age and in many cases is the most valuable asset possessed by an organisation. Information security management is the discipline that focuses on protecting and securing these assets against the threats of natural disasters, fraud and other criminal activity, user error and system failure. Effective information security can be defined as the ‘preservation of confidentiality, integrity and availability of information.’ This book describes the approach taken by many organisations to realise these objectives. It discusses how information security cannot be achieved through technological means alone, but should include factors such as the organisation’s approach to risk and pragmatic day-to-day business operations.

Dalla quarta di copertina

Information is the currency of the information age and in many cases is the most valuable asset possessed by an organisation. Information security management is the discipline that focuses on protecting and securing these assets against the threats of natural disasters, fraud and other criminal activity, user error and system failure.
Effective information security can be defined as the 'preservation of confidentiality, integrity and availability of information.' This book describes the approach taken by many organisations to realise these objectives. It discusses how information security cannot be achieved through technological means alone, but should include factors such as the organisation's approach to risk and pragmatic day-to-day business operations.
This Management Guide provides an overview of the implementation of an Information Security Management System that conforms to the requirements of ISO/IEC 27001:2005 and which uses controls derived from ISO/IEC 17799:2005.
It covers the following:
* Certification
* Risk
* Documentation and Project Management issues
* Process approach and the PDCA cycle
* Preparation for an Audit