GRC Solutions | IT Governance | Risk Management and Compliance for Information Technology

The Cyber Security Handbook – Prepare for, respond to and recover from cyber attacks with the IT Governance Cyber Resilience Framework (CRF) will: Work as a comprehensive cyber security implementation manual. Help organizations secure their information assets by providing a primer on the cyber security activities involved. Give practical guidance on the individual activities identified in the IT Governance CRF (Cyber Resilience Framework) that can help organizations become cyber resilient. Enable organizations to understand the threats and vulnerabilities that they face – technical, human, and physical – and how these can be mitigated.

Understand ISO27001 (ISO 27001) and learn how it can help your organization fight cybercrime, combat cyber-terror, improve your corporate governance, and recover from accidents. A must-have for presenting the compelling business case for ISO 27001. With essential information from ISO 27001 expert Alan Calder, understand ISO 27001 and learn how your organization can: Fight cyber crime; Combat cyber terror; and Boost your corporate governance.

Gain a clear introduction to the NIS Regulations (The Network and Information Systems Regulations 2018) with this essential pocket guide, which explains: The objectives, principles, and indicators of good practice, and gives implementation guidance; The key requirements for OES (operators of essential services); and How to comply with the Regulations

Gain a clear understanding of the NIS Regulations (The Network and Information Systems Regulations 2018) with this essential pocket guide, which explains: Which DSPs (digital service providers) are within scope; The key requirements; and How guidance from international standards can assist with compliance.

The essential guide for anyone about to embark on an ISO 27001 implementation project, covering every step of the process from management buy-in to certification. A must-have guide from ISO 27001 expert Alan Calder to help you get to grips with the requirements of the Standard and make your ISO 27001 implementation project a success: Details the key steps of an ISO 27001 project from inception to certification. Explains each element of the ISO 27001 project in simple, non-technical language. An ideal guide for anyone tackling ISO 27001 implementation for the first time.

This guide provides the IT manager with a detailed breakdown of the various controls required under ISO27001, together with the relevant Microsoft products that can be used to implement them. It should be a core part of the technical library of every MCSE and of every information security practitioner. [ISO27001, Windows, Windows environment, information Security, MCSE, ISMS]

Ensure you are prepared for your audit - find out what an ISO 27001 assessment is, why organizations bother with them, and what individual staff should do when questioned by the auditor. Now updated for ISO 27001:2013.

Ideal for information security managers, auditors, consultants, and organizations preparing for ISO 27001 certification, this book will help readers understand the requirements of an ISMS (information security management system) based on ISO 27001.

ISO 27001: this is a special package price of the world's first two management books on achieving ISO 27001 certification. Together, these two books explain why ISO 27001 is good for your business and how to manage 27001 certifications for the greatest chance of success. Now updated to reflect changes in ISO 27001:2013

Just finished your university degree? Starting a new job in information security? Looking for the next step in your career but not sure which direction to take? Then this bundle is for you. This collection of books will help you explore the options you have, and develop your knowledge and understanding of key information security topics.

Uses real-life information security incidents to explain how to reduce the risks of information security breaches and, crucially, what to do when they occur. Now updated to cover ISO27001:2013.

Provides an overview of basic information security practices that will enable your security team to better engage with their peers in to address the threats facing the organization as a whole. Information security a practical guide provides an overview of basic information security practices that will enable your security team to better engage with their peers to address the threats facing the organization as a whole. If you’re starting a new job as an information security professional, Information Security: A Practical Guide contains all you need to know.

A comprehensive guide to web application security, from development to deployment, as part of a more comprehensive ISO 27001 information security management system. A complete discussion of the ISO 27001 controls that apply to web applications and how they address common types of attack. The second edition is updated to reflect ISO 27001:2013 and the latest cryptography best practices.

Develop a privacy information management system as an extension to your ISO 27001-conformant ISMS with ISO/IEC 27701. Supports GDPR compliance. ISO/IEC 27701:2019 - Security techniques - Extension to ISO/IEC 27001 and ISO 27002 for privacy information management - requirements and guidelines Standard. ISO/IEC 27701 is the international standard that serves as an extension to an ISO 27001/ ISO 27002 ISMS (information security management system). It provides guidelines for implementing, maintaining, and continually improving a PIMS (privacy information management system).

ISO/IEC 27017:2015 – Security techniques – Code of practice for information security controls based on ISO/IEC 27002 for cloud services. ISO/IEC 27017:2015 - Information Technology - Security Techniques - Code of practice for Information Security Controls based on ISO/IEC 27002 for Cloud Services Standard. Guidelines for information security controls applicable to the provision and use of Cloud services. Essential information for organizations that want to provide Cloud services that can be incorporated into an ISO 27001-compliant information security management system (ISMS). Useful for organizations evaluating the security posture of potential Cloud service providers. Available in hardcopy and PDF formats.

ISO/IEC 27013:2015 - Information Technology - Security Techniques - Guidelines for integrated Implementation of ISO/IEC 27001 and ISO/IEC 20000-1 Standard. The international Standard for information security and service management system integration and implementation.

ISO/IEC 27005:2018, Information technology – Security techniques – Information security risk management Standard. The ISO/IEC 27005:2018 standard supports the information security risk management processes specified in ISO/IEC 27001.

ISO/IEC 27004:2016 - Information Technology - Security techniques - information security management - measurement Standard. ISO/IEC 27004:2016 guides to help organizations evaluate the performance and effectiveness of an implemented ISMS (information security management system), as mandated in section 9.1 of ISO/IEC 27001:2013.

ISO/IEC 27002:2013 guides the implementation of controls in Annex A in ISO/IEC 27001. ISO/IEC 27002:2013 - Information Technology - Security Techniques - Code of practice for information security controls Standard. The International Standard supports the implementation of an Information Security Management System (ISMS) based on the requirements of ISO 27001.

ISO/IEC 27001 2013 - Information Technology - Security techniques - information security management systems - requirements Standard. The newest (2013) version of the international standard for information security management systems (ISMSs). Looking for the 2017 version? Please be aware that the international standard is still the 2013 version. Some suppliers have republished country-specific versions of ISO/IEC 27001 (labeled ISO/IEC 27001:2017), which include additional corrigenda that were released after the 2013 publication date. These corrigenda are freely available from the ISO website for those who purchased the original version. They are also supplied by IT Governance when you purchase this standard.

Please be aware that the international standard for 27001 is still the 2013 version. Some suppliers have republished country-specific versions of ISO 27001 (labeled ISO 27001:2017), which include additional corrigenda that were released after the 2013 publication date. These corrigenda are freely available from the ISO website for those who purchased the original version. They are also supplied by IT Governance when you purchase this standard.

ISO/IEC 27000:2018 provides an overview of information security management systems (ISMS). The standard also provides terms and definitions commonly used in the ISMS family of standards. This document applies to all sizes and types of organizations (e.g. commercial enterprises, government agencies and not-for-profit organisations).

Create an ISO 27001-compliant information security policy in minutes with our easy-to-use and customizable high-level template, developed by our expert ISO 27001 practitioners.

ISO27001: 2013 compliant! This tool has a very specific, high-level purpose in any ISMS project, which is to quickly and clearly identify the controls and control areas in which an organization does not conform to the requirements of the standard. Designed to help prioritise work areas, this tool lists all the requirements from ISO 27001:2013 against which you can assess your current state of compliance.

Map the controls of ISO27001:2005 to ISO27001:2013 with this conversion tool. ISO 27001:2005 to ISO 27001:2013 - track the updates with this conversion guidance tool.

Identify how you can make the transition from your ISO 27001: 2005 ISMS to ISO 27001: 2013 with this new Gap Analysis Tool.

Get a true picture of how your current cyber security arrangements measure up against the requirements of the Network and Information Systems Regulations 2018 (NIS Regulations). Applicable to both DSP and OES.

Gain confidence in passing compliance audits from the relevant competent authority, and maintain your organization’s ability to effectively respond to and recover from disruptive incidents.

LiveOnline consultancy service for those needing short, sharp bursts of expert consultancy support on specific issues. Live Online support for those needing short, sharp bursts of expert consultancy on specific issues. Expert, independent view of your risk, compliance, and security frameworks. Cost-effective support delivered by the hour. Purchase the number of hours of consultancy support required in one-hour units.

This product brings you dedicated expertise through five days of scheduled coaching sessions with an ISO27001 consultant and covers each key stage of the ISO27001 implementation project. This offer is part of the ‘Get A Lot Of Help’ ISO 27001 consultancy package. Available anywhere in the world via our exclusive online consultancy service, it provides dedicated expertise and specialist knowledge over five days of scheduled coaching and project review sessions with an expert ISO 27001 consultant and covers each key stage of the ISO 27001 implementation project.