Calder / Watkins Information Security Risk Management for ISO 27001/ISO 27002, third edition

Third Auflage
ISBN: 978-1-78778-138-2
Verlag: De Gruyter
Format: EPUB
Kopierschutz: Adobe DRM (»Systemvoraussetzungen)

E-Book, Englisch, 181 Seiten

No detailed description available for "Information Security Risk Management for ISO 27001/ISO 27002, third edition".

Autoren/Hrsg.

Calder, Alan

Watkins, Steve

Fachgebiete

• Mathematik | Informatik EDV | Informatik Technische Informatik Computersicherheit
• Mathematik | Informatik EDV | Informatik Computerkommunikation & -vernetzung Netzwerksicherheit

Inhaltsverzeichnis

Introduction
Chapter 1: Risk management
Chapter 2: Risk assessment methodologies
Chapter 3: Risk management objectives
Chapter 4: Roles and responsibilities
Chapter 5: Risk assessment software
Chapter 6: Information security policy and scoping
Chapter 7: The ISO 27001 risk assessment
Chapter 8: Information assets
Chapter 9: Threats and vulnerabilities
Chapter 10: Scenario-based risk assessment
Chapter 11: Impact, including asset valuation
Chapter 12: Likelihood
Chapter 13: Risk level
Chapter 14: Risk treatment and the selection of controls
Chapter 15: The Statement of Applicability
Chapter 16: The gap analysis and risk treatment plan
Chapter 17: Repeating and reviewing the risk assessment
Appendix 1: vsRisk Cloud
Appendix 2: ISO 27001 implementation resources
Appendix 3: Books by the same authors

Über Autor(innen)

Calder Alan:

Alan Calder is a leading author on IT governance and information security issues. He is the CEO of GRC International Group plc, the AIM-listed company that owns IT Governance Ltd. Alan is an acknowledged international cyber security guru. He has been involved in the development of a wide range of information security management training courses that have been accredited by the International Board for IT Governance Qualifications (IBITGQ). He is a frequent media commentator on information security and IT governance issues, and has contributed articles and expert comment to a wide range of trade, national and online news outlets. Watkins Steve:

Steve G Watkins is a Director of Kinsnall Consulting Ltd, providing board-level advice on cyber security and related standards. Steve is an active member of SC 27, the international committee responsible for cyber security, information security and privacy protection standards, including the ISO 27001 family. He chairs the UK national committee (IST 33) that mirrors SC 27, and is the Chair of the UK ISO/IEC 27001 User Group. He is also a contracted ISMS and ITSMS Technical Assessor for UKAS, supporting the assessment of certification bodies offering accredited certification to ISO/IEC 27001 and ISO/IEC 20000-1. Alan Calder is a leading author on IT governance and information security issues. He is the CEO of GRC International Group plc, the AIM-listed company that owns IT Governance Ltd. Alan is an acknowledged international cyber security guru. He has been involved in the development of a wide range of information security management training courses that have been accredited by the International Board for IT Governance Qualifications (IBITGQ). He is a frequent media commentator on information security and IT governance issues, and has contributed articles and expert comment to a wide range of trade, national and online news outlets. Steve Watkins is a Director of Kinsnall Consulting Ltd, providing board-level advice on cyber security and related standards. Steve is an active member of SC 27, the international committee responsible for cyber security, information security and privacy protection standards, including the ISO 27001 family. He chairs the UK national committee (IST 33) that mirrors SC 27, and is the Chair of the UK ISO/IEC 27001 User Group. He is also a contracted ISMS and ITSMS Technical Assessor for UKAS, supporting the assessment of certification bodies offering accredited certification to ISO/IEC 27001 and ISO/IEC 20000-1.