Description:
Bridging the gap between ISO27001 and Windows® security Most ISO27001 implementations will involve a Windows® environment at some level. The different approaches to security, however, mean that there is often a knowledge gap between those trying to implement ISO27001 and the IT specialists trying to put the necessary best practice controls in place using Microsoft®'s technical controls. ISO27001 in a Windows® Environment, Third Edition bridges the gap and gives essential guidance to everyone involved in a Windows®-based ISO27001 project. Completely up to date advice Explaining best practice implementation over a wide range of Windows® environments, this third edition covers Windows® 7 and 8, and Microsoft® Windows Server® 2008 and 2012. It is also completely aligned to ISO27001:2013, the latest version of the international standard for information security management. Improved understanding for faster, better implementation Using the guidance in this book, ISO27001 project managers can explain the best practice requirements of the standard to technical security specialists in a way that they will quickly understand. In the same way, technical experts can use this book to gain a deeper understanding of ISO27001, making it easier for them to implement technical solutions that fulfil the requirements. This means that everyone on the project talks the same language, helping the team to work together more effectively. Essential reading for security professionals: • Details the various controls required under ISO27001, together with the relevant Microsoft® products that can be used to implement them. • Explains how to make the most of Windows® security features. • Ideal for bridging the ISO27001/Windows ® security knowledge gap. Successfully implement ISO27001 in a Windows® environment with this step-by-step guide About the Author Brian Honan is recognised as an industry expert on information security, in particular the ISO27001 information security standard. An independent consultant, Brian provides consulting services to clients in various industry segments and his work includes advising various government security agencies and the European Commission. Brian also established Ireland's first ever Computer Security Incident Response Team (CSIRT).
