Nine Steps to Success - An ISO 27001 Implementation Overview, Third edition

Essential guidance for anyone tackling ISO 27001 implementation for the first time.

Achieving and maintaining accredited certification to the international standard for information security management, ISO 27001, can be a complicated job, especially if you are new to the Standard.

Author of Nine Steps to Success – An ISO 27001 Implementation Overview, Alan Calder is the founder and executive chairman of IT Governance. He led the world’s first implementation of a management system certified to BS 7799, the forerunner to ISO 27001, and has been working with the Standard ever since.

Hundreds of organisations around the world have achieved accredited certification to ISO 27001 with IT Governance’s guidance, which is distilled in this book.

Successfully implement ISO 27001 with this must-have guide

Now in its third edition, Nine Steps to Success – An ISO 27001 Implementation Overview will give anyone tackling the Standard for the first time the guidance and direction they need to make their implementation project a success.

 Take a look inside this book

This book will help you:

• Get management support;
• Create a management framework;
• Perform a gap analysis to understand the controls you have in place and identify where to focus your efforts;
• Structure and resource your project, including advice on using consultants and an examination of the tools and resources available to help with your project;
• Conduct a five-step risk assessment, and create a Statement of Applicability (SoA) and a risk treatment plan (RTP);
• Integrate your ISO 27001 information security management system (ISMS) with an ISO 9001 quality management system (QMS) and other management systems;
• Address the documentation challenges you will face as you create policies, procedures, work instructions and records; and
• Continually improve your ISMS, including internal auditing, testing and management review.

“It’s like having a $300/hr consultant at your elbow as you consider the aspects of gaining management support, planning, scoping, communication, etc.”

- Thomas F. Witwicki

 

“This is a rare book in the Information security arena, which manages to deliver an effective message in less than 100 pages. It offers much, to many different players in the implementation and review of an Information Security Management System. ”

- Richard

 

“It is an interesting mix of details on ISO 27001 ISMS and project management methodology and will be a useful guide for an ISMS implementation project.”

- David B. Henderson - Computing Reviews