The main international standard that deals with information security is ISO27001. If your organisation is looking to raise employee awareness of information security, then you will find this book especially useful. The pocket guide explains the concept of information security management within the framework of ISO27001.

• Cover
• Title
• Copyright
• About The Author
• Contents
• Introduction
• Chapter 1: Information Security – What’s That?
  • Who does it matter to?
• Chapter 2: It’s Not IT
• Chapter 3: ISO27001 and the Management System Requirements
• Chapter 4: Legal, Regulatory and Contractual Requirements and Business Risk
• Chapter 5: Information Security Controls
  • Information security organisation, structure and human resources
  • Assets, classification and access control
  • Physical access and environmental issues
  • Networks and IT
  • When things go wrong
  • Compliance and audit
• Chapter 6: Certification
  • Other audit applications
• Chapter 7: Signposting
  • Terms
• ITG Resources