Table of Contents

Introduction; 1: Information Security - What's That? Who does it matter to?; 2: It's Not IT; 3: ISO27001 and the Management System Requirements; 4: Information Assets and the Information Security Risk Assessment; r 5: Information Security Controls; 6: Certification; 7: Signposting; ITG Resources

About the Author

Steve G Watkins managed the world's first successful BS7799 (the forerunner of ISO27001) implementation project and leads the consultancy and training services of IT Governance. He is Chair of the ISO/IEC 27001 User Group, the UK Chapter of the ISMS International User Group, and an ISMS Technical Assessor for UKAS, advising on their assessments of certification bodies offering accredited certification. He has over 20 years' experience of managing integrated management systems, including maintenance of Information Security, Quality, Environmental and Investor in People certifications. His experience includes senior management positions in both the public and private sector.