IT Governance – An international guide to data security and ISO 27001/ISO 27002, Eighth edition

Fully updated to align with ISO 27001/27002:2022

As cyber threats continue to increase in prevalence and ferocity, it is more important than ever to implement a secure ISMS to protect your organisation. Certifying your ISMS to ISO 27001 and ISO 27002 demonstrates to customers and stakeholders that your organisation is handling their data securely.

Recommended textbook for The Open University’s postgraduate information security course

In this updated edition, renowned ISO 27001/27002 experts Alan Calder and Steve Watkins:

• Discuss the ISO 27001/27002:2022 updates;
• Provide guidance on how to establish a strong IT governance system and an ISMS that complies with ISO 27001 and ISO 27002;
• Highlight why data protection and information security are vital in our ever-changing online and physical environments;
• Reflect on changes to international legislation, e.g. the GDPR (General Data Protection Regulation); and
• Review key topics such as risk assessment, asset management, controls, security, supplier relationships, and compliance.