Guidelines on Requirements and Preparation for ISMS Certification Based on ISO/IEC 27001 - Softcover

Humphreys, Edward; Kenyon, Bridget

Softcover

ISBN 10: 058082912X ISBN 13: 9780580829123

Verlag: BSI British Standards Institution, 2013

Über diesen Titel

Biografía del autor

Edward Humphreys (Chartered Fellow of the BCS - FBCS CITP, CISM) is Director of XiSEC Consultants Ltd, a UK company providing Information Security Management consultancy services around the world. He has been an expert in the field of information security and risk management for more than 35 years. During this time he has worked for major international companies (in Europe, North America and Asia), as well organisations such as the European Commission and the OECD. He is the editor of BS 7799 Part 1:1999, ISO/IEC 17799:2000, the 1999 and 2002 editions of BS 7799 Part 2 the ISMS standard and the EA 7/03 the ISMS accreditation guidelines. He is the Founder and Director of the ISMS International User Group and is responsible for the International Register of BS 7799/ISMS Certificates. In 2002 he was honoured with the Secure Computing Lifetime Achievement Award. Bridget Kenyon (CISSP) is Head of Information Security for University College London. Her experience in information security started in 2000 with a role in network vulnerabilities at DERA, following which she has been a Qualified Security Assessor against PCI DSS, the Information Security Officer for Warwick University, and has held a variety of roles in consultancy and academia. She has been involved with ISO/IEC 27001 and its fellows since 2006, when she first joined BSI Panel 1, coordinating development of information security management system standards. She is editor for ISO/IEC 27013, and now chairs BSI Panel 1. She also chairs the Janet IG Working Group, which aims to provide HE input into the NHS's Information Governance Toolkit.

Reseña del editor

In line with the new edition of ISO/IEC 27001, this book provides guidance on the requirements specified in the ISMS standard ISO/IEC 27001:2013 and the best practice described in ISO/IEC 27002:2014 to support the appropriate use of these standards. Based on the 'Plan, Do, Check, Act' model, Guidelines on Requirements and Preparation for ISMS Certification based on ISO/IEC 27001 includes new references and definitions, additional information about the latest developments regarding certification criteria and other related standards developments. Discover industry accepted best practice methods for providing and demonstrating evidence required by an assessment auditor so you are fully prepared. This book provides guidance on the complete "life cycle" of ISMS activities required to establish, implement, monitor and continually improve a set of management controls and processes to achieve effective information security. It explains the transition from the old to the new edition and this will help those involved in certification audits, both ISMS implementers and ISMS auditors. The book is applicable to organizations of any size, government departments and agencies, certification and accreditation bodies, training organizations, academic institutions, implementers, auditors, consultants, trainers and lecturers.

Details zur Ausgabe

• Verlag: BSI British Standards Institution
• Erscheinungsdatum: 2013
• ISBN 10: 058082912X
• ISBN 13: 9780580829123
• Einband: Tapa blanda
• Sprache: Englisch
• Anzahl der Seiten: 174