
- 249 pages
- English
- ePUB (mobile friendly)
- Available on iOS & Android
ISO 27001 Controls โ A guide to implementing and auditing
About this book
Following the success of the first edition, this book has been re-released to reflect the ISO/IEC 27001: 2022 and ISO/IEC 27002: 2022 updates.
Ideal for information security managers, auditors, consultants and organisations preparing for ISO 27001: 2022 certification, this book will help readers understand the requirements of an ISMS (information security management system) based on ISO 27001: 2022. Similarly, for anyone involved in internal or external audits, the book includes the definitive requirements that auditors must address when certifying organisations to ISO 27001: 2022.
The auditing guidance covers what evidence an auditor should look for to satisfy themselves that the requirement has been met. This guidance is useful for internal auditors and consultants, as well as information security managers and lead implementers as a means of confirming that their implementation and evidence to support it will be sufficient to pass an audit.
This guide is intended to be used by those involved in:
- Designing, implementing and/or maintaining an ISMS;
- Preparing for ISMS audits and assessments; or
Undertaking both internal and third-party ISMS audits and assessments.
Frequently asked questions
- Essential is ideal for learners and professionals who enjoy exploring a wide range of subjects. Access the Essential Library with 800,000+ trusted titles and best-sellers across business, personal growth, and the humanities. Includes unlimited reading time and Standard Read Aloud voice.
- Complete: Perfect for advanced learners and researchers needing full, unrestricted access. Unlock 1.4M+ books across hundreds of subjects, including academic and specialized titles. The Complete Plan also includes advanced features like Premium Read Aloud and Research Assistant.
Please note we cannot support devices running on iOS 13 and Android 7 or earlier. Learn more about using the app.
Information
Table of contents
- Cover
- Title
- Copyright
- Contents
- Foreword
- Chapter 1: Scope of this guide
- Chapter 2: Field of application
- Chapter 3: Meeting ISO/IEC 27001 requirements
- Chapter 4: Using control attributes
- Chapter 5: Organizational controls (ISO/IEC 27001, A.5)
- Chapter 6: People controls (ISO/IEC 27001, A.6)
- Chapter 7: Physical controls
- Chapter 8: Technological controls
- Further reading