Search

Recommended textbook for the Open University's postgraduate information security course and the recommended text for all IBITGQ ISO 27001 courses In this updated edition, renowned ISO 27001/27002 experts Alan Calder and Steve Watkins: Discuss the ISO 27001/27002:2022 updates; Provide guidance on how to establish a strong IT governance system and an ISMS (information security management system) that complies with ISO 27001 and ISO 27002; Highlight why data protection and information security are vital in our ever-changing online and physical environments; Reflect on changes to international legislation, e.g. the GDPR (General Data Protection Regulation); and Review key topics such as risk assessment, asset management, controls, security, supplier relationships and compliance. Fully updated to align with ISO 27001/27002:2022 IT Governance – An international guide to data security and ISO 27001/ISO 27002, Eighth edition provides: Expert information security management and governance guidance based on international best practice; Guidance on how to protect and enhance your organisation with an ISO 27001:2022-compliant ISMS; and Discussion around the changes to international legislation, including ISO 27001:2022 and ISO 27002:2022. As cyber threats continue to increase in prevalence and ferocity, it is more important than ever to implement a secure ISMS to protect your organisation. Certifying your ISMS to ISO 27001 and ISO 27002 demonstrates to customers and stakeholders that your organisation is handling data securely.

This book provides a detailed commentary on the GDPR, explains the changes you need to make to your data protection and information security regimes, and tells you exactly what you need to do to avoid severe financial penalties.

Explains the fundamental concepts of PCI DSS version 3.1 and is a perfect as a quick reference for PCI professionals, or as a handy introduction for new staff.

Co-written by a PCI QSA (Qualified Security Assessor) and updated to also cover PCI DSS version 3.0, this handy pocket guide provides all the information you need to consider as you approach the PCI DSS. It is also an ideal training resource for anyone in your organisation who deals with payment card processing.

Presents enhanced IT service management though integrated management frameworks. With the increasing popularity of ITIL as a framework for IT service management (ITSM), a number of organizations have realized that this approach is sometimes not enough on its own. As a result, service managers are looking for ways to enhance their ITIL-based ITSM without having to throw it away and start again. Many are already working towards compliance with ISO/IEC 20000, the international standard for IT service management. With the recent release of COBIT 5, service management practitioners have even more options. However, until now, there has been little guidance on how to merge these frameworks, standards and methodologies to develop best practice across the ITSM function and produce a robust enterprise philosophy for service delivery. This book provides guidance on creating an integrated system based on the three leading service management approaches: COBIT 5, ISO/IEC 20000, and ITIL, and provides a unique mapping to assist service management practitioners in their information gathering. It presents a holistic view of the three and enables service managers to immediately adapt and deploy the guidance, quickly improving their ITSM function and create a stronger, more robust service management system. With instructive illustrations, helpful tables, and mini case studies, the authors apply their unique Five Anchor Approach to demonstrate how the improvement aspects of COBIT 5, ISO/IEC 20000 and ITIL can help identify and deal with common problems faced by today's organizations.

Completely up to date with ISO27001:2013, this is the new edition of the original no-nonsense guide to successful ISO27001 certification. Ideal for anyone tackling ISO27001 for the first time, Nine Steps to Success outlines the nine essential steps to an effective ISMS implementation. Nine critical steps that mean the difference between project success and abject failure.

Exploring how and why an auditor can remain trapped in an ascribed role, this book fills a gap in the market by helping the reader to avoid the traditional finger-pointing stance and instead become a convincing partner with business and technology counterparts.

Title from title screen.

We realise that you have all the books you need about the PRINCE2® system. You don't need another to give you all the same information, just in different words. However, sometimes you could do with a summary or checklist, so you can recall exactly what you need, precisely when you need it.