ISO 27001 Handbook: Implementing and auditing an Information Security Management System in small and medium-sized businesses

For anyone who struggles with the ISO 27001 standard and how to it implement it properly, kudos to Cees van der Wens for his excellent book, “ISO 27001 Handbook”. The subtitle is “implementing and auditing an Information Security Management System in small and medium-sized businesses”. If you could my dog-eared copy you'd know that I found it incredibly helpful and I’ve actually incorporated many of the lessons from the book for my ISO 27001 client services. He expands on many of the pitfalls many companies make when implementing the standard. Highly recommended!

I highly recommend for anyone implementing ISO 27001 at a small or medium sized organization. Extremely valuable data with practical advice.

It was a decent paraphrasing and one persons summary of the standard. I think it should have included the standard in an appendix.

I've read this book several times and I can guarantee that this will help people understand the ISO27001 standard even better. When reading the ISO27001 standard for the first time it will raise a lot of questions (like it did with me). I've used several sources and experts in the field over the years to help me better understand what a company now exactly has to do to comply (and I know a lot of auditors have their own view as well).When I've read Cees van der Wens' book it gave me a clearer view. Not only does he give a lot of tips, but he also mentions most common mistakes (or pitfalls) that companies make when implementing the standard. There aren't many books about this subject and the ones that exists are kinda cryptic. I'm glad the author made this book. Definitely a must have!

Thanks to the holidays, I was able to read this great book in one go, and very happy I did! It not only explains in a clear way what to do, but also the reasons why. If you want to understand ISO27001, this book is all you need.

Aborda de forma prática a norma. Alerta para potenciais enganos ao tentar implementar a 27001. De fácil leitura

Never go to work without it!

What weekends look like...

The book has helped us implementing ISO27001 from A to Z!

A good book. Light and straightforward reading.No to bulky in theoretical aspects.However could go a little further over the ISO 27001 controls section wit examples.