Nine Steps to Success: An ISO27001:2013 implementation overview

INTRODUCTION

Cyber risk has become a critical business issue, with senior management increasingly under pressure – from customers, regulators and partners – to ensure their organisation can defend against, respond to and recover from cyber attack.

Resilience against cyber attack requires an organisation to do more than just erect digital defences; a significant percentage of successful attacks originate in the analogue, physical world, or are aided and exacerbated by physical and environmental vulnerabilities. Effective cyber security therefore requires a comprehensive, systematic and robust information security management system; boards, customers and regulators all seek assurance that information risks have been identified and are being managed. ...