Nine Steps to Success: An ISO27001:2013 Implementation Overview

by Alan Calder

Overview

Completely up to date with ISO27001:2013, this is the new edition of the original

no-nonsense guide to successful ISO27001 certification. Ideal for anyone tackling ISO27001 for the first time, Nine Steps to Success outlines the 9 essential steps to an effective ISMS implementation. 9 critical steps that mean the difference between project success and abject failure.

Based on years of first-hand experience with ISO27001, Alan Calder covers each element of ISO27001 projects in simple, non-technical language, including how to:

• get senior managers and decision makers on side
• plan, manage and run the project for the greatest chance of success
• assess what you need to get from where you are to certification.

Product Details

ISBN-13:	9781849285124
Publisher:	IT Governance Ltd
Publication date:	10/03/2013
Sold by:	Barnes & Noble
Format:	eBook
Pages:	98
File size:	239 KB

About the Author

Alan Calder is the Founder and Executive Chairman of IT Governance Ltd, an information, advice and consultancy firm that helps company boards tackle IT governance, risk management, compliance and information security issues. He has many years of senior management experience in the private and public sectors.

Table of Contents

Contents
1. Initial Approach; 2. Management Support; 3. Scoping; 4. Planning; 5.Communication; 6. Risk Assessment; 7. Controls Selection; 8. Documentation; 9. Testing; 10. Successful Certification

Editorial Reviews

This is a rare book in the Information security arena, which manages to deliver an effective message in less than 100 pages. It offers much to many different players in the implementation and review of an Information Security Management System. To the experienced practitioner, it is a good source to review present activities against. For the practitioner new to the management of information security, it gives valuable advice on planning, preparation and implementation. While to the manager whose business is going through an ISMS programme, it explains what is happening and their part in it. The book does not pretend to give a list of technical controls that can give perfect security for any business - security only comes through the identification and management of the right controls for each business. However, if you are looking for guidance in managing the securing of your business, then this is recommended.

Richard D Smith