GRC Solutions | IT Governance | Risk Management and Compliance for Information Technology

Browse these data protection, EU GDPR (General Data Protection Regulation), and DPA (Data Protection Act) 2018 training courses: UK classroom, online, and distance learning.

Business Continuity and the Pandemic Threat considers the corporate impact of pandemics and shows how best to prepare for and mitigate their effects. A must-have for organizations facing the coronavirus threat. Reveals what you should do to mitigate the risk, and limit the damage, of pandemic incidents. Guides for creating and validating a pandemic plan for your business.

Find out more about the Cyber Essentials Scheme, designed by the UK Government to help all organizations demonstrate their commitment to cyber security. The Cyber Essentials scheme is a UK government-backed framework supported by the NCSC (National Cyber Security Centre). It sets out five basic security controls that can protect organizations against 80% of common cyber attacks. The scheme is designed to help organizations of any size demonstrate their commitment to cyber security – while keeping the approach simple and the costs low. The Cyber Essentials certification process is managed by the IASME Consortium (IASME), which licenses certification bodies to carry out Cyber Essentials and Cyber Essentials Plus certifications.

Find out more about the Cyber Essentials Scheme, designed by the UK Government to help all organizations demonstrate their commitment to cyber security. The Cyber Essentials scheme is a UK government-backed framework supported by the NCSC (National Cyber Security Centre). It sets out five basic security controls that can protect organizations against 80% of common cyber attacks. The scheme is designed to help organizations of any size demonstrate their commitment to cyber security – while keeping the approach simple and the costs low. The Cyber Essentials certification process is managed by the IASME Consortium (IASME), which licenses certification bodies to carry out Cyber Essentials and Cyber Essentials Plus certifications.

This bestselling guide is ideal for anyone carrying out a GDPR compliance project, providing comprehensive guidance and practical advice. Now in its fourth edition, this bestselling guide is the perfect companion for anyone carrying out a GDPR (General Data Protection Regulation) compliance project. It provides comprehensive guidance and practical advice on complying with the Regulation, including the GDPR in terms you can understand, the obligations of data controllers and processors, what to do about international data transfers, and Data subjects’ rights and consent.

This toolkit includes all the necessary procedures and processes for ensuring that the controls you are implementing are aligned with the requirements of the Cyber Essentials Scheme. Designed to reflect the requirements of the Cyber Essentials scheme. Built on expert knowledge from numerous cyber security implementation projects. Ensure that the controls you are implementing are aligned with the requirements of the Cyber Essentials scheme. Access, manage and amend your documents from anywhere with 2fInternet access, via our 2fDocumentKits platform. This is an annual subscription product, however, you can cancel at any time. (T&Cs apply)

This pocket guide takes you through the essentials of cyber security, the principles that underpin it, vulnerabilities and threats, and how to defend against attacks. Cyber Security: Essential principles to secure your organization takes you through the fundamentals of cyber security, the principles that underpin it, vulnerabilities and threats, and how to defend against attacks.

A clear, concise primer on the GDPR this pocket guide provides an overview of what you need to do to comply with the Regulation. Thrive under the GDPR (General Data Protection Regulation) wherever you are in the world. This pocket guide will help you understand the Regulation, the broader principles of data protection, and what the GDPR means for businesses in Europe and beyond. It explains the terms and definitions used within the GDPR in simple terms; The key requirements; and How to comply with the Regulation.

Develop an agile, adaptive approach to managing your business. Agile business management is a series of concepts and processes for the day-to-day management of an organization. This book includes an agile, adaptive approach to business management that embraces change. Case studies provide real-world examples and guidance.

This guide provides the IT manager with a detailed breakdown of the various controls required under ISO 27001, together with the relevant Microsoft products that can be used to implement them. It should be a core part of the technical library of every MCSE and every information security practitioner. [ISO27001, Windows, Windows environment, information Security, MCSE, ISMS.]

Ensure you are prepared for your audit – find out what an ISO 27001 assessment is, why organizations bother with them, and what individual staff should do when questioned by the auditor. Now updated for ISO 27001:2013.

Ideal for information security managers, auditors, consultants, and organizations preparing for ISO 27001 certification, this book will help readers understand the requirements of an ISMS (information security management system) based on ISO 27001.

ISO 27001: this is a special package price of the world’s first two management books on achieving ISO 27001 certification. Together, these two books explain why ISO 27001 is good for your business and how to manage 27001 certifications for the greatest chance of success. Now updated to reflect changes in ISO 27001:2013.

Just finished your university degree? Starting a new job in information security? Looking for the next step in your career but not sure which direction to take? Then this bundle is for you. This collection of books will help you explore the options you have, and develop your knowledge and understanding of key information security topics.

Uses real-life information security incidents to explain how to reduce the risks of information security breaches and, crucially, what to do when they occur. Now updated to cover ISO27001:2013.

Provides an overview of basic information security practices that will enable your security team to better engage with their peers to address the threats facing the organization as a whole. Information Security a practical guide provides an overview of basic information security practices that will enable your security team to better engage with their peers to address the threats facing the organization as a whole. If you’re starting a new job as an information security professional, Information Security: A Practical Guide contains all you need to know.

A comprehensive guide to web application security, from development to deployment, as part of a more extensive ISO 27001 information security management system. A complete discussion of the ISO 27001 controls that apply to web applications and how they address common types of attacks. The second edition is updated to reflect ISO 27001:2013 and the latest cryptography best practices.

Develop a privacy information management system as an extension to your ISO 27001-conformant ISMS with ISO/IEC 27701. Supports GDPR compliance. ISO/IEC 27701:2019 – Security techniques – Extension to ISO/IEC 27001 and ISO 27002 for privacy information management – requirements and guidelines Standard. ISO/IEC 27701 is the international standard that serves as an extension to an ISO 27001/ ISO 27002 ISMS (information security management system). It provides guidelines for implementing, maintaining, and continually improving a PIMS (privacy information management system.)

The perfect introduction to the principles and practice of the governance of enterprise IT using COBIT®5. Written by an experienced COBIT® trainer and practitioner, Geoff Harmer provides advice that is easy to follow and apply. This book includes: A practical introduction to the key concepts of COBIT® 5, ideal for anyone involved in an implementation project, or studying for the COBIT® 5 Foundation exam. The main frameworks and standards supporting the governance of enterprise IT (GEIT), putting the benefits of COBIT® 5 into context. [COBIT, GEIT, Enterprise IT, IT Governance, Governance Framework, COBIT5, COBIT 5,]

ISO/IEC 27017:2015 – Security techniques – Code of practice for information security controls based on ISO/IEC 27002 for cloud services. ISO/IEC 27017:2015 – Information Technology – Security Techniques – Code of practice for Information Security Controls based on ISO/IEC 27002 for Cloud Services Standard. Guidelines for information security controls applicable to the provision and use of Cloud services. Essential information for organizations that want to provide Cloud services that can be incorporated into an ISO 27001-compliant information security management system (ISMS). Useful for organizations evaluating the security posture of potential Cloud service providers. Available in hardcopy and PDF formats.

ISO/IEC 27001 2022 Standard | IT Governance UK = Download the 2022 version of the international ISMS (information security management systems) standard to align your ISMS with internationally recognized best practices. [ISO/IEC 27001 2022 Standard, ISO 27001, ISO 27001 2022, ISO 27001 Standard, ISO 27001 PDF.]

ISO/IEC 27005:2022, Information technology – Security techniques – Information security risk management Standard. The ISO/IEC 27005:2022 standard supports the information security risk management processes specified in ISO/IEC 27001.

ISO/IEC 27004:2016 – Information Technology – Security techniques – information security management – measurement Standard. It guides to help organizations evaluate the performance and effectiveness of an implemented ISMS (information security management system), as mandated in section 9.1 of ISO/IEC 27001:2013.

ISO/IEC 27002:2022 guides the implementation of controls in Annex A in ISO/IEC 27001. ISO/IEC 27002:2022 – Information Technology – Security Techniques – Code of practice for information security controls Standard. The International Standard supports the implementation of an Information Security Management System (ISMS) based on the requirements of ISO 27001.

ISO/IEC 27001:2022 – Information security, cybersecurity and privacy protection – Information security management systems – Requirements. Download the 2022 version of the international standard for ISMSs (information security management systems). Align your ISMS to ISO 27001’s best-practice approach in addressing your organization’s people, processes, technology, and physical controls. This standard provides the framework against which you can achieve independent accredited certification.

These standards provide the framework and controls against which you can achieve independent accredited certification. Download the 2022 versions of ISO/IEC 27001 and ISO 27002 – the international standards for ISMSs (information security management systems). Align your ISMS to ISO 27001’s best-practice approach in addressing your organization’s people, processes, technology, and physical controls.

ISO/IEC 27000:2018 provides an overview of information security management systems (ISMS). The standard also provides terms and definitions commonly used in the ISMS family of standards. This document applies to all sizes and types of organizations (e.g. commercial enterprises, government agencies, and not-for-profit organizations).

Create an ISO 27001-compliant information security policy in minutes with this easy-to-use and customizable high-level template, developed by expert ISO 27001 practitioners. IT Governance (US) – Governance, Risk Management and Compliance for Information Technology IT Governance | Governance, Risk Management and Compliance for Information Technology (I) IT Governance | Governance, Risk Management and Compliance for Information Technology (II) ITGovernance | Governance, Risk Management and Compliance for Information Technology (III)

Expertly written customizable ISO 27001 templates to save you time and money in fulfilling your documentation obligations. Accelerate your ISMS (information security management system) implementation project with more than 85 customizable, ISO 27001:2022-compliant documentation templates. Save hours of work with implementation tools and expert guidance from the team that led the world’s first successful ISO 27001 certification project, including: Planning your ISMS project ISO 27001:2022 Gap Analysis Tool Toolkit Manual ISO 27001 Implementation Manager Project Initiation Document

Safeguard your organization from cyber threats and gain peace of mind with £100,000 cyber insurance cover. Cyber defense-in-depth for your organization, including £100,000 of cyber insurance cover. Benefit from year-round expert support, comprehensive staff training, and unlimited vulnerability scanning. For additional levels of cyber insurance cover, please see IT Governance Silver and Gold packages This is an annual subscription product that can be billed in easy monthly installments. (T&Cs apply.)