An Introduction to Information Security and ISO 27001 Ebook

A strong information security program begins with a clear understanding of what information security means, what must be protected, and how assurance can be managed systematically. This introductory ebook provides a foundation for understanding information security and the role of ISO 27001.

The guide covers information security fundamentals, defining the boundaries of a security regime, managing an information security management system, allocating resources, and demonstrating assurance. It also helps readers understand what claims of adherence to ISO 27001 mean in practice.

The publication is useful at multiple stages of an information security initiative, including decision making, project initiation, and ongoing awareness activities, and includes supporting abbreviations, terms, and definitions for reference.