Are You Ready for an ISMS Audit Based on ISO/IEC 27001?

Description

This revised publication is in line with the 2005 editions of BS ISO/IEC 17799 and BS ISO/IEC 27001 Information technology. Security techniques. Information security management systems. Requirements. It includes an ISMS process check and a gap analysis workbook.

This book is primarily for use by organizations seeking to prepare for certification to BS ISO/IEC 27001 (BS 7799-2). For this purpose it is recommended that the pre-certification assessment is best carried out under the supervision of the person responsible for information security in the organization or by internal audit staff. System developers may also find it a useful reference document when considering the security aspects of new systems.

This guide for organizations wishing to carry out internal assessment of their information security management system (ISMS) against the requirements in ISO/IEC 27001:2005 either as a precursor to an internal ISMS auditor in preparation for a formal third-party ISMS certification audit (see Guidelines on Requirements and Preparations for ISMS Certification based on ISO/IEC 27001).

CONTENTS:

* Scope of this guide

    * Use of the standards

    * Companion guides

    * Identifying the ISMS scope

    * How to use this guide

    * ISMS process requirements

    * Control requirements

    * ISMS processes workbook (assessment of ISMS process requirements)

    * Gap Analysis Workbook (assessment of ISMS controls)