Kenyon ISO 27001 Controls – A guide to implementing and auditing

1. Auflage 2019
ISBN: 978-1-78778-146-7
Verlag: De Gruyter
Format: EPUB
Kopierschutz: Adobe DRM (»Systemvoraussetzungen)

E-Book, Englisch, 237 Seiten

Autoren/Hrsg.

Kenyon, Bridget

Weitere Mitwirkende

White (Female Synthesized Voice), Alice

Fachgebiete

• Mathematik | Informatik EDV | Informatik Computerkommunikation & -vernetzung Netzwerksicherheit
• Mathematik | Informatik EDV | Informatik Technische Informatik Computersicherheit

Inhaltsverzeichnis

Chapter 1: General
1.1 Scope of this guide
1.2 Field of application
Chapter 2: Implementing and auditing ISMS control objectives and controls
2.1 Information security policies (ISO/IEC 27001, A.5)
2.2 Organization of information security (ISO/IEC 27001, A.6)
2.3 Human resource security (ISO/IEC 27001, A.7)
2.4 Asset management (ISO/IEC 27001, A.8)
2.5 Access control (ISO/IEC 27001, A.9)
2.6 Cryptography (ISO/IEC 27001, A.10)
2.7 Physical and environmental security (ISO/IEC 27001, A.11)
2.8 Operations security (ISO/IEC 27001, A.12)
2.9 Communications security (ISO/IEC 27001, A.13)
2.10 System acquisition, development and maintenance (ISO/IEC 27001, A.14)
2.11 Supplier relationships (ISO/IEC 27001, A.15)
2.12 Information security incident management (ISO/IEC 27001, A.16)
2.13 Information security aspects of business continuity management (ISO/IEC 27001, A.17)
2.14 Compliance (ISO/IEC 27001, A.18)
Further reading

Über Autor(innen)

Bridget Kenyon (CISSP) is global CISO for Thales eSecurity. Her experience in information security started in 2000 with a role in network vulnerabilities at DERA, following which she has been a PCI Qualified Security Assessor, information security officer for Warwick University and head of information security for UCL, and has held a variety of roles in consultancy and academia. Bridget has been contributing to international standards since 2006, when she first joined BSI Panel 1, coordinating development of information security management system standards; she is currently editor for ISO/IEC 27014. Bridget has also co-authored three textbooks on information security. She strongly believes that “information security is fundamental to reliable business operations, not a nice-to-have”. In 2018, she was named one of the top 25 women in tech by UK publication PCR.