This title is available in Softcover format here The most relevant and accessible guide on how asset owners should approach a risk assessment! Your company is carrying out an information security risk assessment. As a manager, what do you need to know? If you want to safeguard your business information, you will be interested in obtaining ISO27001 certification. ISO27001 is an international standard for an Information Security Management System (ISMS). ISO27001 will help you to protect your business information from thieves, hostile attacks or accidents. Compliance with ISO27001 can also enhance the reputation of your company and open up attractive business opportunities. In order to comply with ISO27001, your company will need to have a risk assessment carried out. You need to identify the risks to your business information before you can understand the best way to protect it. Asset owners and their role Information security needs cross-organisation buy-in, so a proper risk assessment will involve people in the company other than the IT specialists. Under ISO27001, the measures that form part of a risk assessment include a specific role for asset owners. The assets are the information that is of value to the company, while the asset owners are defined in the standard as

< Prev		Next >