Information Security using ISO 27001:2022

Information Security using ISO 27001:2022 has been very well received and is now in its third print.

The book’s purpose is simple yet essential: to help organisations make their information more secure, using ISO 27001 as a powerful and practical tool. Author Ger Bothmer shows how a set of logical and pragmatic principles can form the foundation of a successful approach to information security. A valuable outcome of this approach is that it naturally results in a management system fully aligned with the requirements of ISO 27001:2022.

This book provides all the practical guidance needed to set up, implement, and maintain an Information Security Management System (ISMS). Starting from the basics, it invites readers to apply a proven and effective method within their own organisation. Each of the 93 security controls is explained in detail: why it exists, how it can be applied effectively, and which questions to ask to assess its effectiveness in an audit.