An Introduction to Information Security and ISO27001: A Pocket Guide

Introduction

This book is intended to meet the needs of two groups:

1. Individual readers who have turned to it as an introduction to a topic that they know little about.

2. Organisations implementing, or considering implementing, some sort of information security management regime, particularly if using ISO/IEC 27001:2005, who wish to raise awareness.

In either case the book furnishes readers with an understanding of the basics of information security, including:

• A definition of what information security means.

• How managing information security can be achieved using an approach recognised worldwide.

• The sorts of factors that need to be considered in an information security regime, including how the perimeters of such a scheme can be properly defined. ...