IT Governance An International Guide to Data Security and ISO 27001/ISO 27002

"This book is to ISO27002 what ISO27002 is to ISO27001 - it is the guidance to the standard's guidance. As such, it is the most impressively comprehensive guide to implementing ISO27001-level InfoSec in your organisation. It gives detailed understanding and insight about the motivation and purpose of the different controls that will help build a fit-for-purpose ISMS. Because of this, I chose it as the set book for the very popular Open University Introduction to InfoSec module." ("Dr Jon Hall, Open University InfoSec Module Chair and Author")
"A well-structured and informative book that deserves a place on the bookshelf of any ISMS lead implementer and an invaluable reference for organisations seeking accredited third-party certification." ("Alastair Hunter - UKAS Information Assurance Technical Focus")