IT governance: an international guide to data security and ISO27001/ISO27002

"Faced with constant and fast-evolving threats to information security and with a growing exposure to cyber risk, managers at all levels and in organizations of all sizes need a robust IT governance system. Now in its sixth edition, the bestselling IT Governance provides best-practice guidance for companies looking to protect and enhance their information security management systems and protect themselves against cyber threats. IT Governance has been fully updated to take account of current cyber security and advanced persistent threats and reflects the latest regulatory and technological developments, including the 2013 updates to ISO27001/ISO27002. Changes for this edition include

Introduction -- 01 Why is information security necessary? -- The nature of information security threats -- Information insecurity -- Impacts of information security threats -- Cybercrime -- Cyberwar -- Advanced persistent threat -- Future risks -- Legislation -- Benefits of an information security management system -- 02 The UK Combined Code, the FRC Risk Guidance and Sarbanes-Oxley -- The Combined Code -- The Turnbull Report -- The Corporate Governance Code -- Sarbanes-Oxley -- Enterprise risk management -- Regulatory compliance -- IT governance -- 03 ISO27001 -- Benefits of certification -- The history of ISO27001 and ISO27002 -- The ISO/IEC 27000 series of standards -- Use of the standard -- ISO/IEC 27002 -- Continual improvement, Plan-Do-Check-Act, and process approach -- Structured approach to implementation -- Management system integration -- Documentation -- Continual improvement and metrics -- 04 Organizing information security -- Internal organization -- Management review -- The information security manager -- The cross-functional management forum -- The ISO27001 project group -- Specialist information security advice -- Segregation of duties -- Contact with special inter…