ISO 27001 Handbook: Implementing and auditing an Information Security Management System in small and medium-sized businesses Wens Cees Van Der

This book helps you to bring the information security of your organization to the right level by using the ISO/IEC 27001 standard.An organization often provides services or products for years before the decision is taken to obtain an ISO/IEC 27001 certificate. A what?This handbook is intended to help small and medium-sized businesses establish, implement, maintain and continually improve an information security management system in accordance with the requirements of the international standard ISO/IEC 27001. Usually, a lot has already been done in the field of information security, but after reading the requirements of the standard, it seems that something more needs to be done: an 'information security management system' must be set up.

At the same time, this handbook is also intended to provide information to auditors who must investigate whether an information