Location via proxy:   [ UP ]  
[Report a bug]   [Manage cookies]                
Everand Logo

Welcome to Everand!

  • Discover millions of ebooks, audiobooks, and so much more with a free trial

    From $11.99/month after trial. Cancel anytime.

    ISO/IEC 27001:2022: An introduction to information security and the ISMS standard
    ISO/IEC 27001:2022: An introduction to information security and the ISMS standard
    ISO/IEC 27001:2022: An introduction to information security and the ISMS standard
    Ebook62 pages46 minutes

    ISO/IEC 27001:2022: An introduction to information security and the ISMS standard

    By Steve Watkins

    5/5

    ()

    Switch to audiobook
    Read preview

    About this ebook

    Written by an acknowledged expert on the ISO/IEC 27001 Standard, ISO 27001:2022 – An Introduction to information security and the ISMS standard is an ideal primer for anyone implementing an information security management system aligned to ISO 27001:2022.

    The guide is a must-have resource giving a clear, concise and easy-to-read introduction to information security, providing guidance to ensure the management systems you put in place are effective, reliable and auditable.

    This pocket guide will help you to:

    1. Make informed decisions

    Using this guide will enable the key employees in your organisation to make better decisions before embarking on an information security project.

    1. Ensure everyone is up to speed

    This guide will give the non-specialists on the project board and in the project team a clearer understanding of what an information security management system involves, reflecting the ISO 27001:2022 version of the Standard.

    1. Raise awareness among staff

    Ensure that your staff know what is at stake with regard to information security and understand what is expected of them with this pocket guide.

    1. Enhance your competitiveness

    Use this guide to begin your ISO 27001:2022 implementation journey and let your customers know that the information you hold about them is managed and protected appropriately.

    Get up to speed with the ISO 27001:2022 updates and keep your information secure About the author:

    Steve is a Director of Kinsnall Consulting Ltd, providing board-level advice on cyber security and related standards.

    Steve is an active member of SC 27, the international committee responsible for cyber security, information security and privacy protection standards, including the ISO 27001 family. He Chairs the UK national committee (IST 33) that mirrors SC 27 and is the Chair of the UK ISO/IEC 27001 User Group.

    He is also a contracted ISMS and ITSMS Technical Assessor for UKAS, supporting the assessment of certification bodies offering accredited certification to ISO/IEC 27001 and ISO/IEC 20000-1.

    TOC:

    Introduction

    Chapter 1: Information security – What’s that?

    Chapter 2: It’s not IT

    Chapter 3: ISO 27001 and the management system requirements

    Chapter 4: Legal, regulatory and contractual requirements and business risk

    Chapter 5: Information security controls

    Chapter 6: Certification

    Chapter 7: Signposting

    Further reading

    LanguageEnglish
    Publisheritgovernance
    Release dateNov 15, 2022
    ISBN9781787784055
    Author

    Steve Watkins

    STEVE WATKINS is a professor of English at the University of Mary Washington. He is the author of a collection of stories, My Chaos Theory, and two young adult novels, Down Sand Mountain and What Comes After. Watkins is also an award-winning journalist whose work has appeared in publications including LA Weekly, Poets and Writers, and the Nation.

    Read more from Steve Watkins

    Related to ISO/IEC 27001:2022

    Related ebooks

    Computers For You

    View More
    View More

    Related podcast episodes

    Related articles

    • UNLIMITED

      Zero Trust

      Sep 11, 2022

      Zero Trust
      2 min read

    • UNLIMITED

      Ask The Expert Ethical Investing

      Oct 16, 2023

      In a very basic way, ethical investing is choosing investments that align with our values while (hopefully) still making money. That often means avoiding investment in companies that are involved with certain industry sectors like fossil fuels and no

      2 min read

    • UNLIMITED

      Choosing The Best Fit

      Aug 7, 2020

      all investments have an impact – either positive or negative. A positive impact can be generated deliberately or unintentionally. Selecting the right metrics is an important tenet of the impact measurement and management process. But simply measuring

      2 min read

    • UNLIMITED

      “My Old Mum, Who Thinks ‘Cloud’ Means Rain, Started Worrying About Supply Chain Vulnerabilities”

      Dec 5, 2024

      If resilience was the buzzword for the years 2022 to 2024, then get ready, because 2025 is going to be the year of the supply chain. I’m staking my claim early. Why am I so confident that supply chain management will be at the forefront of everyone’s

      6 min read

    • UNLIMITED

      Security Experts Predict 2021

      Jan 10, 2021

      Yes, right after an article about how security predictions may not always come through in the way they are predicted, we’ve rounded up a series of 2021 predictions from the very same experts, and even some hackers. Why? Because unlike previous years,

      7 min read

    • UNLIMITED

      Bad Practice

      Jan 8, 2025

      At the risk of sounding like an old-fashioned teacher, the biggest danger to businesses in 2025 is their own bad practice. Whether it’s through a lack of clear security policies, insufficient planning or relying upon the same old protections as they

      2 min read

    • UNLIMITED

      Will You Run Out of Money in Retirement? The Right Income Plan Can Help

      Aug 15, 2021

      One of the most persistent analogies I have heard in my career as a financial adviser is the story of climbing and descending Mount Everest.  As the story goes, more climbers perish on the way down the mountain than do climbing up it.  We then equate

      3 min read

    • UNLIMITED

      Digital Trust Is On The Horizon

      Mar 1, 2022

      Digital Trust Is On The Horizon
      11 min read

    • UNLIMITED

      Many Pennies For Your Thoughts

      Feb 14, 2020

      Many Pennies For Your Thoughts
      5 min read

    • UNLIMITED

      How Do You Know You Are Okay?

      May 27, 2019

      How Do You Know You Are Okay?
      2 min read

    • UNLIMITED

      Retirement Planning Reinvented

      Apr 2, 2019

      You might think I sound presumptuous when I say that a new era in retirement planning has begun. But I plan to prove it to you. A new retirement planning method demonstrates that by properly allocating the smartest sources of income, you can create

      2 min read

    • UNLIMITED

      Web App Security

      Jun 29, 2021

      Web App Security
      8 min read

    • UNLIMITED

      Amplified Working ‘at Speed of The Customer’

      Jan 21, 2021

      The year 2020 challenged deep-rooted beliefs and transformed the way we work. Beliefs such as sales can occur only in physical branches or physical documents are required to be presented in person to close a sale or we will always need branches to se

      4 min read

    • UNLIMITED

      “The Questioner And I Were In The Virtual Room Alone Together. Or Were We?”

      Jan 8, 2025

      I was taken by surprise on Teams the other day with the question: “Please may I speak to you about a confidential matter?” As a solicitor, one of my professional duties is to keep the affairs of my clients confidential, and I am used to confidential

      6 min read

    • UNLIMITED

      Take Personal Control

      Mar 31, 2022

      Take Personal Control
      5 min read

    • UNLIMITED

      Smart Home vs. Hackers

      Apr 27, 2021

      Smart Home vs. Hackers
      3 min read

    Related categories

    Reviews for ISO/IEC 27001:2022

    5/5

    4 ratings1 review

    What did you think?

    Tap to rate

    Review must be at least 10 words

    • 5/5
      Don't miss out. Highly recommended.
      Basic ISO27001 explained in a easy to understand manner

    Book preview

    ISO/IEC 27001:2022 - Steve Watkins

    INTRODUCTION

    This pocket guide is intended to meet the needs of two groups:

    1. Individual readers who have turned to it as an introduction to a topic that they know little about.

    2. Organisations implementing, or considering implementing, some sort of information security management regime, particularly if using ISO/IEC 27001:2022, that wish to raise awareness.

    In either case the guide gives readers an understanding of the basics of information security, including:

    •A definition of information security;

    •How managing information security can be achieved using an approach recognised worldwide as good practice;

    •The factors that need to be considered in an information security regime, including how the perimeters of such a scheme can be properly defined;

    •How an information security management system (ISMS) can ensure it is maximising the effect of any budget it has;

    •Key areas of investment for a business-focused ISMS; and

    •How organisations can demonstrate the degree of assurance they offer with regard to information security, how to interpret claims of adherence to the ISO 27001 standard and exactly what that means.

    Corporate bodies will find this guide useful at a number of stages in any information security project, including:

    •At the decision-making stage, to ensure that those committing to an information security project do so from a suitably informed position;

    •At project initiation, as an introduction to information security for the project board, project team members and other key contributors; and

    •As part of an ongoing awareness campaign, being made available to all staff ² and to new starters as part of their induction.

    Corporate users may find they get the most benefit by making this pocket guide available and adding a small flyer inside it, which explains how various sections relate to their own specific environment, or where the issues raised in this guide are addressed in their own ISMS. For example:

    This pocket guide is designed to be read without having to break frequently from the text, but there is a list of abbreviations along with terms and definitions in Chapter 7 for easy reference. Where footnotes have been added they are not essential reading, and it is recommended you ignore these on your first read through if you are new to the subject – on a second reading they will be of more relevance, and particularly if you are involved in an information security project or

    Enjoying the preview?
    Page 1 of 1