Implementing the ISO/IEC 27001 Information Security Management System Standard

Standards are updated frequently, and those for information security management are no exception. Consultant Humphreys is uniquely positioned to keep it all straight for you, focusing on issues critical to protecting valuable assets while simultaneously dealing with business risks, regulations and governance, and compliance. He works through the tenets of information security, including risks, jargon, and relation to legislation and regulation, then reviews the family of standards, including the standardization process, evolution of the family, requirements, the risk-based approach, management responsibilities, internal audits, improvements and links to other standards, elements of risk management, implementation and deployment, utilization and maintenance. Humphreys also offers information on standard accreditation and certification. The result is a compact and concise treatment of what could be a very frustrating change from the previous standard. Annotation c2007 Book News, Inc., Portland, OR (booknews.com)