Implementing the ISO/IEC 27001 ISMS Standard Ebook

Implementing an information security management system requires a clear understanding of business risk, governance, compliance, and the operating context in which security controls must work. This ebook provides a structured reference for organizations seeking to translate the ISO/IEC 27000 family of standards into an actionable management approach.

The publication focuses on ISO/IEC 27001 implementation while also covering the wider ISO/IEC 27000 series. Its scope includes ISMS business context, operations, risk, leadership, support, and practical information related to accreditation and certification.

For security leaders and practitioners, the book brings these topics together in one resource to support protection of information assets, governance of security activities, management of business risk, and compliance planning.