ISO 27001 Risk Management in Plain English

Who is this book for?

1. Beginners in risk assessment and treatment. This book is written primarily for beginners in this field and for people with moderate knowledge about risk assessment and treatment – no prior experience or knowledge about information security is required.
2. ISO 27001 consultants. This book gives you the methodology on how to carry out risk management projects, helping you to gain the know-how for your future consulting engagements.
3. Experienced information security professionals. This book brings all the knowledge you need (and additional insights) together in one comprehensive and systematic volume, helping to fill any gaps you may have.
4. Small or mid-size companies. This book is perfect for IT administrators, information security professionals, heads of IT departments, or project managers tasked with implementing risk management in a small or mid-sized company.

Why do you need this book?

• The only resource you need – Put simply, if you want to complete risk management projects, this book gives you everything you’ll ever need (even if you’re new to the field).
• Written in plain English – Leaving the technical jargon to the geeks, ISO 27001 Risk Management is written for normal people in plain, simple language – meaning you can focus on getting the job done.
• Think like a consultant – And avoid hiring one! Author and experienced ISO 27001 consultant Dejan Kosutic shares all his risk management knowledge and practical wisdom with you in one invaluable handbook.
• Focus on risk management – Concentrate just on risk management, without getting bogged down with other information.