A Comprehensive Guide to Information Security Management and Audit

The book is a comprehensive guide to information security and management systems, audit planning and preparation, audit techniques and collecting evidence, international information security (ISO) standard 27001, and asset management. It is written for senior undergraduate, graduate students, and researchers in electrical engineering, electronics and communications engineering, computer engineering, and information technology.

Format: Hardback
Length: 172 pages
Publication date: 30 September 2022
Publisher: Taylor & Francis Ltd

This comprehensive book provides readers with a thorough understanding of information security and management systems, audit planning and preparation, audit techniques and collecting evidence, international information security (ISO) standard 27001, and asset management. It delves into essential topics such as security mechanisms, security standards, audit principles, audit competence and evaluation methods, and the principles of asset management. Designed as an ideal reference text for senior undergraduate, graduate students, and researchers in fields including electrical engineering, electronics and communications engineering, computer engineering, and information technology, this book offers a comprehensive exploration of the world of information security.

The book begins by introducing the concepts and applications of information security from an organizational perspective. It explains the process of audit planning and preparation, emphasizing the importance of understanding the organization's information security needs and objectives. The book then delves into the realm of audit techniques and collecting evidence, showcasing various methods and tools used to assess the effectiveness of information security controls. It follows the ISO 27001 standards, providing guidance on how to write important documentation that meets the requirements of the international standard.

Furthermore, the book explores the application of confidentiality, integrity, and availability (CIA) in the area of audit planning and preparation. It covers topics such as managing business assets, agreements on how to deal with business assets, and media handling. The book demonstrates audit techniques and collects evidence to write the important documentation by following the ISO 27001 standards.

In addition to these core topics, the book emphasizes the importance of asset management in information security. It explains how organizations manage their assets, including hardware, software, and information, and how access control policies are implemented to ensure the security of sensitive information. The book presents seven case studies that illustrate real-world scenarios and challenges in information security and asset management. These case studies provide practical insights and examples that can help readers apply the principles and techniques discussed in the book to their own organizations.

Overall, this book is a valuable resource for anyone seeking to enhance their knowledge and understanding of information security and management systems, audit planning and preparation, audit techniques and collecting evidence, international information security (ISO) standard 27001, and asset management. It offers a comprehensive and up-to-date coverage of these topics, making it an essential reference text for senior undergraduate, graduate students, and researchers in the field.

Weight: 412g
Dimension: 163 x 240 x 18 (mm)
ISBN-13: 9781032344430