Many books have been written about ISO 27001, often focusing on the standard’s requirements. But what is good enough? How does it actually add value?
This book was written to highlight the nuances and the freedom within the framework — ISO 27001 between the lines. It is filled with anecdotes, real-world examples, practical tips, common pitfalls, and useful templates.
This book is intended for anyone involved in organizing or assessing information security. It can support organizations preparing to implement ISO 27001, as well as certified companies seeking to refine their implementation and increase its added value.
