Задумались над внедрением СУИБ в соответствии с ISO 27001 ?  Эта книжка может стать неплохим подспорьем на этом нелегком пути.

Основные сведения о книге:

• Количество страниц: 352
• Публикация: Auerbach Publications
• Поступила в продажу: 28 ноября 2007
• Язык: Английский

Полное описание представлено здесь.

Содержание:

INTRODUCTION
ISO SECURITY STANDARDS
INTERNATIONAL SECURITY ORGANIZATION (ISO) SECURITY STANDARD CERTIFICATION
GOALS
OUTLINE AND FLOW
COMMENTARY

INTRODUCTION TO ISO SECURITY STANDARDS
OBJECTIVES
CORNERSTONES OF INFORMATION SECURITY
THE HISTORY OF ISO INFORMATION SECURITY STANDARDS
INFORMATION SECURITY STANDARDS ROADMAP AND
NUMBERING
INTERNATIONAL SECURITY MANAGEMENT STANDARDS
OTHER PROPOSED INFORMATION SECURITY STANDARDS
INTRODUCTION TO THE ISO/IEC 27001 STANDARD
INTRODUCTION TO THE ISO 17799 STANDARD
RELATIONSHIP BETWEEN ISO 27001 AND THE ISO 17799
RELATIONSHIP TO OTHER MANAGEMENT STANDARDS
PDCA AND SECURITY STANDARDS CROSS REFERENCE

INFORMATION SECURITY MANAGEMENT SYSTEM (ISMS)
OBJECTIVES
ISMS INTRODUCTION
SECURITY MANAGEMENT FRAMEWORK (SMF)
INTRODUCTION
ISMS ESTABLISHMENT PROCESS…TO-BE OR PDCA

FOUNDATIONAL CONCEPTS AND TOOLS FOR AN ISMS
OBJECTIVES
SMF APPLICATIONS
ISMS INITIAL PLANNING AND IMPLEMENTATION
ESTABLISHING CURRENT STATUS OF ORGANIZATIONAL SECURITY MANAGEMENT (ASSESSMENT PROCESS)
ANALYSIS OF DISCOVERY RESULTS
AN INITIAL VIEW OF DEVELOPING AN ISMS

IMPLEMENTING AN INFORMATION SECURITY MANAGEMENT SYSTEM (ISMS) - PDCA
OBJECTIVES
ISMS DEFINITION
PDCA MODEL
PLAN PHASE
DO PHASE
CHECK PHASE
ACT PHASE
SUMMARY OF IMPLEMENTING THE ISMS

AUDIT AND CERTIFICATION
OBJECTIVES
CERTIFICATION PROCESS OVERVIEW
SELECTING AN ACCREDITED CERTIFICATION BODY
CERTIFICATION PREPARATION CHECKLIST
THE AUDIT STAGE PROCESS

COMPLIANCE MANAGEMENT
OBJECTIVES
INTRODUCTION TO COMPLIANCE MANAGEMENT
IA COMPLIANCE MANAGEMENT PROGRAM
CONCLUSION AND COMMENTARY

APPENDIX A: ISMS ASSESSMENT DISCOVERY QUESTION SET

APPENDIX B: SAMPLE STATEMENT OF APPLICABILITY (SOA)

APPENDIX C: PDCA GUIDELINE DOCUMENTS - OUTLINES
ISMS - PLAN PHASE GUIDELINES-DOCUMENT OUTLINE
ISMS - DO PHASE GUIDELINES-DOCUMENT OUTLINE
ISMS - CHECK PHASE GUIDELINES-DOCUMENT OUTLINE
ISMS - ACT PHASE GUIDELINES-DOCUMENT OUTLINE

APPENDIX D: POLICY, STANDARD, AND PROCEDURE SAMPLE TEMPLATES
SAMPLE POLICY TEMPLATE
SAMPLE STANDARD TEMPLATE
SAMPLE PROCEDURE TEMPLATE

APPENDIX E: ISMS POLICY AND RISK TREATMENT TEMPLATES
ISMS POLICY TEMPLATE
RISK TREATMENT TEMPLATE

APPENDIX F: PROJECT DEFINITION TEMPLATE

USEFUL BITS OF KNOWLEDGE (UBOKS)

Ревью одного из читателей:

I like it!
This book could be used as a very thorough step by step guide for implementing security to any size organization. As a bonus it also helps achieve ISO 27001 certification by an accredited certification body.
Author's style is very impressive. He managed to squeeze an entire management system in just six chapters; this is what I call 0% fat, every page of the guide can be used to improve either the security of an organization or the awareness of it. A security manager can use it to create enough presentation to get the upper management's "buy-in" for a serious security controls, it can also be used by auditors to create an "audit program".
No need to panic, if you need a sample of Statement Of Applicability, or ISMS Policy and Risk Treatment Templates, or any of the documentations needed for proper ISMS its in there.
In conclusion; you must have a copy of this book if you are responsible for the protection of both information and information technology relevant to an organization.