Information security: risk assessment, management systems, the ISO/IEC 27001 standard

This title is printed to order. This book may have been self-published. If so, we cannot guarantee the quality of the content. In the main most books will have gone through the editing process however some may not. We therefore suggest that you be aware of this before ordering this book. If in doubt check either the author or publisher’s details as we are unable to accept any returns unless they are faulty. Please contact us if you have any questions.

In this book, the following subjects are included: information security, the risk assessment and treatment processes (with practical examples), the information security controls.

The text is based on the ISO/IEC 27001 standard and on the discussions held during the editing meetings, attended by the author.

Appendixes include short presentations and check lists.

CESARE GALLOTTI has been working since 1999 in the information security and IT process management fields and has been leading many projects for companies of various sizes and market sectors.

He has been leading projects as consultant or auditor for the compliance with standards and regulations and has been designing and delivering ISO/IEC 27001, privacy and ITIL training courses.

Some of his certifications are: Lead Auditor ISO/IEC 27001, Lead Auditor 9001, CISA, ITIL Expert and CBCI, CIPP/e.

Since 2010, he has been Italian delegate for the the editing group for the ISO/IEC 27000 standard family.

Web: www.cesaregallotti.it.