Information Security using ISO 27001:2022

The book’s purpose is simple yet essential: to help organisations make their information more secure, using ISO 27001 as a powerful and practical tool.Author Ger Bothmer shows how a set of logical and pragmatic principles can form the foundation of a successful approach to information security. A valuable outcome of this approach is that it naturally results in a management system fully aligned with the requirements of ISO 27001:2022.This book provides all the practical guidance needed to set up, implement, and maintain an Information Security Management System (ISMS). Starting from the basics, it invites readers to apply a proven and effective methodwithin their own organisation.Each of the 93 security controls is explained in detail: why it exists, how to apply it effectively, and which questions to ask when assessing its effectiveness in an audit. This section can be used both when setting up the ISMS and later as an invaluable reference guide after implementation.“Information Security using ISO 27001:2022” has been very well received and is now in its third print.About the author:Ger Bothmer (Roermond, the Netherlands, 1965) has been advising organisations on the design and effective implementation of management systems since 1992. His focus is on information security, quality, and business continuity, working with standards such as ISO 27001, NEN-7510, TISAX, ISO 9001, and ISO 22301.Since 1995, Ger has also served as a Senior Subcontractor Lead Auditor for a renowned certification body.Over the years, he has worked with more than 500 organisations, either as a consultant or auditor, helping to shape or assess their management systems. Clients describe his approach as thorough, pragmatic, and highly relevant. Read more