CHAPTER 1: SCOPE OF THIS GUIDE
This guide provides instructions on implementing ISMS control requirements and on auditing existing control implementations to help organisations prepare for certification in accordance with ISO/IEC 27001.
The guide covers the ISMS control requirements that should be addressed by organisations considering certification. Chapters 5–8 discuss each of the controls in Annex A of ISO/IEC 27001 from two different viewpoints.
• Implementation guidance – what needs to be considered to fulfil the control requirements when implementing the controls from Annex A of ISO/IEC 27001. This guidance is aligned with ISO/IEC 27002, which gives advice on implementing the controls.
• Auditing guidance – what should be checked, and how, ...
Get ISO 27001 Controls - A guide to implementing and auditing, Second edition now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.