دانلود کتاب راهنمای جامع مدیریت امنیت اطلاعات و حسابرسی

It is important to note that securing and keeping information from par­ties who do not have the authorization to access such information is an extremely important issue. To address this issue, it is essential for an orga­nization to implement an ISMS (Information Security and Management System) standard such as ISO 27001 to address the issue comprehensively. The authors of this volume have explained various aspects of the security framework.

In addition, ISMS does not only help organizations to assess their infor­mation security compliance with ISO 27001 but can also be used as a mon­itoring tool, helping organizations monitor the security statuses of their information resources and potential threats. ISMS is developed to provide solutions to solve obstacles, difficulties, and expected challenges associ­ated with literacy and governance of ISO 27001. It also covers functions to assess the risk level of organizations toward compliance with ISO 27001.

The main objective of this volume is (1) to overcome security threats which are exposed through organizations and their information systems and networks and (2) to reduce risk effects which undermine or create dif­ficulties for its business operations.

Therefore, there is a need for an information security management meth­odology to protect information systematically. This creates the importance of ISMS.