Risk Assessment Program/Checklist for Information Security Management System (ISO/IEC 27001 Standard Current Version) [$30.00]

The ISO/IEC 27001 is an international standard that was put in place to provide minimum requirements for the establishment, implementation, maintenance and continuous improvement of an information security management system (ISMS). Every organization wishing to comply and be certified to the ISO/IEC 27001 standard adopt an implementation strategy for its ISMS based on its needs and objectives, organizational processes, structure and security requirements. The primary objectives of establishing, implementing, maintaining and continually improving the ISMS within an organization is to preserve the confidentiality integrity and availability of its information assets through the application of risk management process and providing assurance to stakeholders on risk management adequacy.

To be effective, organization seeking to comply with ISO/IEC 27001 standard must integrate its information security management system with the organization’s processes and overall management structures by ensuring that information security is considered and embedded in processes, information systems and control design. Regulatory agencies across several industries including financial services, telecommunications, insurance, energy, manufacturing, business services and consulting have mandated the implementation and compliance of ISO/IEC 27001 standard for practitioners within its IT Standards Blueprint. The objective is to ensure continual improvement within an organization by determining whether processes within the scope of the its ISMS conforms to the organization’s own requirements for ISMS as well as the control requirements of the ISO 27001 standard.

This book is a do-it-yourself risk assessment guide for the IT audit & risk assurance professionals who perform risk assessment review of ISO/IEC 27001 information security management system. It provides a detailed step by step guide on how to perform risk assessment of the ISO/IEC 27001 management system to ensure compliance with the ISO/IEC 27001 standard as well as organization’s own requirement for ISMS.

It serves as a risk assessment program/checklist for IT Assurance practitioners (including IT auditors and IT risk analyst) and ISMS Managers with details of procedures to be performed to confirm adequacy of risk management and compliance with the requirements of the ISO 27001 management and annexure control clauses. It provides the reader with control objectives, description of the ISO/IEC 27001 management and annexure control clauses, reasons for selection of controls, evidence to be used for decision on control adequacy, responsible persons, ampong others. The risk assessment program/checklist can easily be integrated with popular audit management software such as teammatessolutions or MKinsight field audi.

Intended for organizations desirous of building its information security management system to conform to ISO/IEC 27001 standard. ISO/IEC 27001 Lead Auditors (LA) and Lead Implementer (LI) will find this book very useful the continuous review of their ISMS and ensuring that they pass the certification and surveillance audits by external auditors. Below is a sample page of the ISMS risk assessment checklist/program. For full access to the document, you can subscribe to our membership plan or purchase the book by click the Add to Cart button above.

Review the book sample pages and table of content below. Please note that a link to download the eBook in PDF format will be provided to you upon successful checkout. However, if you want the book in other reading formats such as .ePub, or .kobi, please Contact US and we will email you a copy of the book in the format of your choice on request.