Information Security Risk Management For ISO 27001/Iso27002

Description

Drawing on international best practice, including ISO/IEC 27005, NIST SP800-30 and BS7799-3, the book explains in practical detail how to carry out an information security risk assessment. It covers key topics, such as risk scales, threats and vulnerabilities, selection of controls, and roles and responsibilities, and includes advice on choosing risk assessment software. Review: Methodology may be solid, but tool content seems to be old - I was looking for a book on tools or Risk Management and saw that there there is a section on this in the online book. It mentions a company with URL [...] the company and product no longer seem to exist and the last time the software was updated according to the European Union Agency for Network and Information Security was in 2003. Review: Cover risk well - ISO 27001 can be difficult and complex. This helps understand the risk part..