Examines standards of some of the best practice for companies looking to protect and enhance their information security management systems, allowing them to ensure that their IT security strategies are co-ordinated, coherent, comprehensive and cost effective.

The development of IT Governance, which recognizes the convergence between business and IT management, makes it essential to understand how best to deal with information security risks. This book explores various legislations, including the launch of ISO/IEC 27001, which makes a global standard of information security best practice available.

Helps you to become familiar with the principles and practice of good governance appropriate to your company, enabling you to uphold those standards that can improve your corporate reputation while providing reassurance to market regulators.

Provides guidance on developing a risk management methodology that meets the requirements of ISO 27001, the information security management standard, and how to carry out a risk assessment that will help achieve corporate risk management objectives.

Corporate governance provides the context within which twenty-first century organisations have to assess and deal with their investments. This title sets out for managers, executives and IT professionals the practical steps necessary to meet corporate and IT governance requirements.

Provides an overview of the two international information security standards, ISO/IEC 27001:2005 and ISO/IEC 17799:2005. Designed to complement Implementing Information Security , this guide provides links to other standards, such as ISO 9001, PAS 56 and ISO 20000, and links to frameworks such as CobiT and ITIL.

ISO 27001:2005 replaced the information security standard BS7799-2 from October, 2005. This book offers practical guidance on achieving ISO 27001 certification. It shows: how to get management and board buy-in; how to get cross-organizational, cross functional buy-in; the gap analysis - 'how much do you really need to do?'; and more.

Written by a business manager, this book sets out why ISO 27001 is the right answer to the information security challenge. It explains why so many organizations have registered to BS7799/ISO27001, and aims to make a case for pursuing the standard acceptable to management in various organizations.

Aims to provide guidance that helps directors and boards understand important business topics of the information age. This book comes with a complimentary copy of the eBook version.