ISO 27001 ISMS Handbook

ISO 27001 ISMS Handbook aims to assist  small and medium-sized businesses in implementing and maintaining an information security management system (ISMS) in accordance with the requirements of the international standard ISO/IEC 27001:2022.

This handbook assumes that you ultimately want your information security management system to be certified by an accredited certification body. In this book, you will find detailed explanations, 100+ examples, and sixty common pitfalls. This book also contains information about the rules of the game and the course of a certification audit.

This handbook is also intended to provide information to auditors who must investigate whether an information security management system meets all requirements and has been effectively implemented. It contains specific instructions for performing ISO/IEC 27001:2022 audits.

ISO 27001 ISMS Handbook focuses on the information security management system (ISMS), and to a lesser extent on the Annex A controls. For a detailed explanation of the 93 Annex A controls, you can use the "ISO 27001 Controls Handbook – Implementing and auditing 93 controls to reduce information security risks".