Information Security Risk Management for ISO 27001 / ISO 27002, Third Edition

  • 2h 6m
  • Alan Calder
  • IT Governance
  • 2019

Ideal for risk managers, information security managers, lead implementers, compliance managers and consultants, as well as providing useful background material for auditors, this book will enable readers to develop an ISO 27001-compliant risk assessment framework for their organisation and deliver real, bottom-line business benefits.

In this Book

  • Introduction
  • Risk Management
  • Risk Assessment Methodologies
  • Risk Management Objectives
  • Roles and Responsibilities
  • Risk Assessment Software
  • Information Security Policy and Scoping
  • The ISO 27001 Risk Assessment
  • Information Assets
  • Threats and Vulnerabilities
  • Scenario-Based Risk Assessment
  • Impact, Including Asset Valuation
  • Likelihood
  • Risk Level
  • Risk Treatment and the Selection of Controls
  • The Statement of Applicability
  • The Gap Analysis and Risk Treatment Plan
  • Repeating and Reviewing the Risk Assessment
  • Further Reading
SHOW MORE
FREE ACCESS

YOU MIGHT ALSO LIKE

Book The Risk Management Handbook: A Practical Guide to Managing the Multiple Dimensions of Risk, Second Edition
Book Information Assurance and Risk Management Strategies: Manage Your Information Systems and Tools in the Cloud
Book The CISO Perspective: Understand The Importance of The CISO in The Cyber Threat Landscape

PEOPLE WHO VIEWED THIS ALSO VIEWED THESE

Audiobook ISO27001/ISO27002: A Pocket Guide
Course Azure Data Fundamentals: Azure Data Visualization
Rating 4.6 of 78 users Rating 4.6 of 78 users (78)
Course CISM 2020: Information Security & Business Process Alignment
Rating 4.6 of 198 users Rating 4.6 of 198 users (198)