ISO/IEC 27001:2013 – Mastering Risk Assessment and the Statement of Applicability

CyberSecurity Summary

Provides comprehensive guidance on implementing the ISO/IEC 27001:2013 standard for information security management systems (ISMS). The text details requirements for risk assessment, risk treatment, and the creation of a Statement of Applicability (SOA), offering practical methodologies like the event-consequence approach and various control types. It also presents examples of documented information for processes and results, outlining how to define and apply a risk assessment and treatment process to ensure consistent, valid, and comparable outcomes. Furthermore, the source explores different layouts for the SOA and introduces an online "Assistant" tool to aid organizations in conforming to the standard. Ultimately, this publication serves as a practical guide for organizations seeking to achieve acceptable information security risks and comply with ISO/IEC 27001.
You can listen and download our episodes for free on more than 10 different platforms:
https://linktr.ee/cyber_security_summary
Get the Book now from Amazon:
https://www.amazon.com/ISO-IEC-27001-Assessment-Applicability/dp/B08TQ4T2Q6?&linkCode=ll1&tag=cvthunderx-20&linkId=a38f66b6ef06762b24f69cd281589136&language=en_US&ref_=as_li_ss_tl