Guide to the Implementation and Auditing of ISMS Controls Based on ISO/IEC 27001

Humphreys, Edward

ISBN 10: 0580829103 / ISBN 13: 9780580829109

Edité par BSI British Standards Institution, 2013

A propos de cet article

May have name/sticker written on first page only, other then that, NO writing or markings! Good Condition, shows minor signs of wear from being read or stored. Not ex library.

N° de réf. du vendeur ASP-000000-shelf-37-1212

Détails bibliographiques

• Titre: Guide to the Implementation and Auditing of ISMS Controls Based on ISO/IEC 27001
• Éditeur: BSI British Standards Institution
• Date de parution: 2013
• Langue: anglais
• ISBN à 10 chiffres: 0580829103
• ISBN à 13 chiffres: 9780580829109
• Reliure: Couverture souple
• État de l'article: Comme neuf

A propos de ce titre

Présentation de l'éditeur

This book provides guidance on the implementation of ISMS (Information Security Management Systems) control requirements for auditing existing control implementations in order to help organizations preparing for certification in accordance with requirements specified in the new ISO/IEC 27001:2013 Information security management system (ISMS) - Requirements. It includes the definitive requirements that auditors must address when certifying organizations to the 2nd edition of ISO/IEC 27001:2013 and provides guidance on the implementation, checking and auditing of the controls. The guide discusses each of the controls of the standard from two different viewpoints: Implementation - This describes what to consider in order to fulfil the control requirements when implementing the controls from the standard. This guidance is aligned with the standard, which gives advice on the implementation of the controls. Auditing - This focuses on what to check when examining the implementation of the standard controls to ensure that the implementation covers the essential ISMS control requirements. Get the information you need to be fully updated in line with the revised standard and includes new references and definitions. It is applicable to organizations of any size, government departments and agencies, certification and accreditation bodies, training organizations, academic institutions, implementers, auditors, consultants, trainers and lecturers.