TY - BOOK AU - Arnason,Sigurjon Thor AU - Willett,Keith D. TI - How to achieve 27001 certification : : an example of applied compliance management / SN - 0849336481 U1 - 005.8 PY - 2008/// CY - New York : PB - Auerbach Publications, KW - AUDITORIA DE SISTEMAS KW - ISO 27001 KW - PROCESAMIENTO ELECTRONICO DE DATOS - NORMAS KW - PROTECCION DE DATOS KW - SEGURIDAD EN COMPUTADORES - NORMAS KW - SISTEMAS DE INFORMACION EN ADMINISTRACION N1 - Sistemas N2 - Security is no longer a luxury for an organization; it is a legislative mandate. A formal methodology that helps and oganization define and execute an ISMS is essential in order to perform and prove due diligence in upholding stakeholder interests and legislative compliance. Providing a good starting point for novices, as well as finely tuned nuances for seasoned security professional, this book is an invaluable resource for anyone involved with meeting an organization's security, certification, and compliance needs.; The authors offer insight from their own experiences, providing question and answers to determine an organization's information security strengths and weaknesses with respect to the standard. They also present-step-by-step information to help and organization plan an implementation, as well as prepare for certification and audit.; The security criterion of the International Standards Organization (ISO) provides and excellent foundation for identifying and addressing business risks through a disciplined security management process. Using security standards ISO 27002 (formerly ISO 17799) and ISO 27001 as basis, How to Achieve 27001 Certification: An Example of Applied Compliance Management helps and organization align its security and organizational goals so it can generate effective security compliance, and management programs. ER -