Table Of Contents

• • Chapter - 12: Communications and operations management;
  • Chapter - 13: Controls against malicious software (malware) and back-ups;
  • Chapter - 14: Network security management and media handling;
  • Chapter - 15: Exchanges of information;
  • Chapter - 16: Electronic commerce services;
  • Chapter - 17: E-mail and internet use;
  • Chapter - 18: Access control;
  • Chapter - 19: Network access control;
  • Chapter - 20: Operating system access control;
  • Chapter - 21: Application access control and teleworking;
  • Chapter - 22: Systems acquisition, development and maintenance;
  • Chapter - 23: Cryptographic controls;
  • Chapter - 24: Security in development and support processes;
  • Chapter - 25: Monitoring and information security incident management;
  • Chapter - 26: Business continuity management;
  • Chapter - 27: Compliance;
  • Chapter - 28: The ISO/IEC 27001 audit
  • Chapter - 11: Equipment security;
  • Chapter - 10: Physical and environmental security;
  • Chapter - 09: Human resources security;
  • Chapter - 08: Asset management;
  • Chapter - 07: External parties;
  • Chapter - 06: The risk assessment and Statement of Applicability;
  • Chapter - 05: Information security policy and scope;
  • Chapter - 04: Organizing information security;
  • Chapter - 03: Information security standards;
  • Chapter - 02: Sarbanes–Oxley and regulatory compliance;
  • Chapter - 01: Why is information security necessary?;
  • Chapter - 00: Introduction;