Watkins ISO27001:2013 Assessments Without Tears

1. Auflage 2013
ISBN: 978-1-84928-536-0
Verlag: De Gruyter
Format: EPUB
Kopierschutz: Adobe DRM (»Systemvoraussetzungen)

E-Book, Englisch, 29 Seiten

Updated to reflect the changes in ISO27001:2013, this pocket guide is the ideal way to prepare all staff in an organisation for an ISO27001 audit.

The audit process can be a daunting one as an auditor can direct questions at any employee within your organisation. Written in a clear plain style, this pocket guide offers a tried and tested briefing, and should be issued to staff in advance of the audit to help them prepare for the experience and be well equipped to answer questions when asked. This pocket book explains what an ISO 27001 assessment is, why organisations bother with them, and what individual staff should do and, perhaps as importantly, not do if an auditor chooses to question them.

The book covers: - What an assessment is
- Why information security is important
- What happens during an assessment
- What to consider when answering an auditor';s questions
- What happens when an auditor finds something wrong
- Your policies and how to prepare
- Further information: who to ask
This pocket book is the perfect tool to train everybody inside your organisation to play their part in your ISO 27001 assessment.

Autoren/Hrsg.

Watkins, Steve

Fachgebiete

• Mathematik | Informatik EDV | Informatik Technische Informatik Computersicherheit

Inhaltsverzeichnis

1: What Are Assessments? 2: Why Information Security? 3: What Actually Happens During an Assessment? 4: Answering Auditors' Questions 5: What Happens When The Auditor Finds Something Wrong? 6: Policies 7: Further Advice and Assistance Appendix 1: Definitions of Terms

Über Autor(innen)

Watkins Steve:
Steve G Watkins is a Director of Kinsnall Consulting Ltd, providing board-level advice on cyber security and related standards. Steve is an active member of SC 27, the international committee responsible for cyber security, information security and privacy protection standards, including the ISO 27001 family. He chairs the UK national committee (IST 33) that mirrors SC 27, and is the Chair of the UK ISO/IEC 27001 User Group. He is also a contracted ISMS and ITSMS Technical Assessor for UKAS, supporting the assessment of certification bodies offering accredited certification to ISO/IEC 27001 and ISO/IEC 20000-1. Steve Watkins is a Director of Kinsnall Consulting Ltd, providing board-level advice on cyber security and related standards. Steve is an active member of SC 27, the international committee responsible for cyber security, information security and privacy protection standards, including the ISO 27001 family. He chairs the UK national committee (IST 33) that mirrors SC 27, and is the Chair of the UK ISO/IEC 27001 User Group. He is also a contracted ISMS and ITSMS Technical Assessor for UKAS, supporting the assessment of certification bodies offering accredited certification to ISO/IEC 27001 and ISO/IEC 20000-1.