Guidelines on Requirements and Preparation for ISMS Certification based on ISO/IEC 27001 (Second edition) - Softcover

Edward Humphreys

Softcover

ISBN 10: 058082912X ISBN 13: 9780580829123

Publisher: BSI British Standards Institution, 2013

Synopsis

This book provides guidance to users of ISO/IEC 17799 (BS 7799-1) and ISO/IEC 27001 (BS 7799-2), on the Plan, Do, Check, Act model and the Information Security Management Systems (ISMS) process requirements for organizations preparing for accredited certification. This book has been updated to include new references and definitions, and additional information about the latest developments regarding certification criteria and other related standards developments. It provides industry accepted best practice methods for providing and demonstrating the evidence required by an assessment auditor. This document provides guidance on the requirements specified in the ISMS (information security management system) standard ISO/IEC 27001:2005 and the best practice described in ISO/IEC 17799:2005 to support the appropriate use of these standards. It gives guidance on the complete life cycle of ISMS activities required to establish, implement, monitor and continually improve a set of management controls and processes to achieve effective information security.

About this title

About the Author:

Edward Humphreys (Chartered Fellow of the BCS - FBCS CITP, CISM) is Director of XiSEC Consultants Ltd, a UK company providing Information Security Management consultancy services around the world. He has been an expert in the field of information security and risk management for more than 35 years. During this time he has worked for major international companies (in Europe, North America and Asia), as well organisations such as the European Commission and the OECD. He is the editor of BS 7799 Part 1:1999, ISO/IEC 17799:2000, the 1999 and 2002 editions of BS 7799 Part 2 the ISMS standard and the EA 7/03 the ISMS accreditation guidelines. He is the Founder and Director of the ISMS International User Group and is responsible for the International Register of BS 7799/ISMS Certificates. In 2002 he was honoured with the Secure Computing Lifetime Achievement Award. Bridget Kenyon (CISSP) is Head of Information Security for University College London. Her experience in information security started in 2000 with a role in network vulnerabilities at DERA, following which she has been a Qualified Security Assessor against PCI DSS, the Information Security Officer for Warwick University, and has held a variety of roles in consultancy and academia. She has been involved with ISO/IEC 27001 and its fellows since 2006, when she first joined BSI Panel 1, coordinating development of information security management system standards. She is editor for ISO/IEC 27013, and now chairs BSI Panel 1. She also chairs the Janet IG Working Group, which aims to provide HE input into the NHS's Information Governance Toolkit.

About this edition

• Publisher: BSI British Standards Institution
• Publication date: 2013
• ISBN 10: 058082912X
• ISBN 13: 9780580829123
• Binding: Paperback
• Edition number: 2
• Number of pages: 128