Network and Information Systems (NIS) Regulations - A Pocket Guide for Operators of Essential Services

Computers & Technology

Networking & Cloud Computing

It Governance Publishing

Succeed as a PRINCE2(R) practitioner with this concise overview. PRINCE2 is the leading model for effective project management methodology. PRINCE2 certification will help you implement projects across your organisation efficiently, creating a controlled and manageable environment for employees. This guide explains the fundamental principles of PRINCE2 2017, enabling you to review essential themes before taking your PRINCE2 Foundation exam. Following accreditation, it serves as a reference guide to help you manage ongoing PRINCE2 projects within your organisation. Ideal for anyone involved with implementing a new project that uses the PRINCE2 framework, whether you are a student, project board member or team manager, this guide will help you: <ul> <li>Prepare for your PRINCE2 2017 Foundation exam;</li> <li>Implement PRINCE2-aligned projects; and</li> <li>Enhance your skills as a PRINCE2 practitioner.</li> </ul> Key features: <ul> <li>Concise summary of the fundamental principles and themes of PRINCE2 2017.</li> <li>Clear and comprehensible format.</li> <li>Serves as a reference guide while you manage ongoing PRINCE2 projects.</li> </ul> New for the third edition: <ul> <li>Updated to align with PRINCE2 2017.</li> <li>New diagrams to aid understanding of the framework.</li> </ul> A succinct reference guide that summarises the key elements of PRINCE2 2017 - buy this book today to get the help and guidance you need!

The Concise PRINCE2® - Principles and Essential Themes

Business & Money

Management & Leadership

This pocket guide is an introduction to the EU's NIS Directive (Directive on security of network and information systems). It outlines the key requirements, details which digital service providers are within scope, and explains how the security objectives from ENISA's Technical Guidelines and international standards can help DSPs achieve compliance. This pocket guide is a primer for any DSP that needs to comply with the NIS Directive.The pocket guide helps DSPs: <ul> <li>Gain insight into the NIS Directive and who is regulating it;</li> <li>Identify if they are within the scope of the Directive;</li> <li>Understand the key requirements; and</li> <li>Understand how guidance from international standards and ENISA can help them comply.</li> </ul> Your essential guide to understanding the EU's NIS Directive - buy this book today and get the help and guidance you need.

A Concise Introduction to the NIS Directive: A Pocket Guide for Digital Service Providers

All the facts you need to pass your ITIL(R) 4 Foundation examITIL 4 is the latest evolution of the leading best-practice framework for ITSM (IT service management). It has been significantly updated from ITIL v3 and addresses new ITSM challenges, includes new technologies and incorporates new ways of working.ITIL(R) Foundation Essentials ITIL 4 Edition is the ultimate revision guide for candidates preparing for the ITIL 4 Foundation exam. It is fully aligned with the Foundation course syllabus and gives a clear and concise overview of the facts. You can use it in place of writing revision notes, giving you more time to focus on learning the information you need to pass the exam.Whether you are taking an ITIL 4 Foundation training course or are a self-study candidate, new to the framework or looking to upgrade your ITIL 2011 certification, this guide is the essential companion. It: <ul> <li>Provides definitions of the key terms and concepts used in ITIL 4;</li> <li>Presents detailed information in clear, user-friendly and easy-to-follow ways through tables, bullet points and diagrams; and</li> <li>Explains the key figures and diagrams in the ITIL syllabus.</li> </ul> New for the ITIL 4 Edition <ul> <li>Fully updated to reflect the changes introduced in ITIL 4.</li> <li>New sections on the guiding principles of ITIL and the four dimensions of service management.</li> <li>Updated overview of the ITIL Foundation exam.</li> </ul> Start preparing for your ITIL Foundation exam - order your copy today. ITIL(R) is a registered trade mark of AXELOS Limited. All rights reserved.

ITIL Foundation Essentials – ITIL

Achieving certification to multiple ISO standards can be time consuming and costly, but an IMS incorporates all of an organisation's processes and systems so that they are working under - and towards - one set of policies and objectives. With an IMS, risks and opportunities are no longer managed in silos within the organisation, but with one unified or integrated approach from the leadership team. This guide discusses the benefits of an IMS, and the strategies you should consider before implementing one. It references a vast number of standards that can be integrated but stresses the need for senior management to lead the implementation by deciding upon objectives and which standards to include. Ideal for the c-suite, directors, compliance managers, auditors and trainers, this pocket guide will explain: -What an IMS is - even if you have no prior knowledge, this book will help you envisage what an IMS is and how it works; -How to develop a strategy for IMS implementation - this guide emphasises the importance of effectively planning your IMS implementation by having objectives set by senior management to encourage a unified approach; and -The benefits of an IMS - information on how an IMS can benefit your organisation, e.g. avoiding duplication of effort as management systems are no longer working in silos, reducing the number of audits required, and making more effective use of senior management time. Key features: -An easy-to-follow introduction to an IMS, and advice on IMS implementation strategies. -Discusses the challenges you may face during implementation and how to prepare for and overcome them. -Advice on audits and IMS certification.

Implementing an Integrated Management System: A Pocket Guide

Making a Success of Managing and Working Remotely

Understand the CCPA (California Consumer Privacy Act) and how to implement strategies to comply with this privacy regulation.
Established in June 2018, the CCPA was created to remedy the lack of comprehensive privacy regulation in the state of California. When it comes into effect on January 1, 2020, the CCPA will give California residents the right to: <ul>
<li>Learn what personal data a business has collected about them</li> <li>Understand who this data has been disclosed to</li> <li>Find out whether their personal data has been sold to third parties, and who these third parties are</li> <li>Opt-out of such data transactions, or request that the data be deleted. </li> </ul>
Many organizations that do business in the state of California must align to the provisions of the CCPA. Much like the EU’s GDPR (General Data Protection Regulation), businesses that fail to comply with the CCPA will face economic penalties. Prepare your business for CCPA compliance with our implementation guide that: <ul>
<li>Provides the reader with a comprehensive understanding of the legislation by explaining key terms</li> <li>Explains how a business can implement strategies to comply with the CCPA</li> <li>Discusses potential developments of the CCPA to further aid compliance</li> </ul>
Your guide to understanding the CCPA and how you can implement a strategy to comply with this legislation – buy this book today to get the guidance you need! About the author Preston Bukaty is an attorney and consultant. He specializes in data privacy GRC projects, from data inventory audits to gap analyses, contract management, and remediation planning. His compliance background and experience operationalizing compliance in a variety of industries give him a strong understanding of the legal issues presented by international regulatory frameworks. Having conducted more than 3,000 data mapping audits, he also understands the practical realities of project management in operationalizing compliance initiatives. Preston’s legal experience and enthusiasm for technology make him uniquely suited to understanding the business impact of privacy regulations such as the GDPR and the CCPA. He has advised more than 250 organizations engaged in businesses as varied as SaaS platforms, mobile geolocation applications, GNSS/telematics tools, financial institutions, fleet management software, architectural/engineering design systems, and web hosting. He also teaches certification courses on GDPR compliance and ISO 27001 implementation, and writes on data privacy law topics. Preston lives in Denver, Colorado. Prior to working as a data privacy consultant, he worked for an international GPS software company, advising business areas on compliance issues across 140 countries. Preston holds a juris doctorate from the University of Kansas School of Law, along with a basketball signed by Hall of Fame coach Bill Self.

The California Consumer Privacy Act (CCPA): An implementation guide

Bukaty, Preston

Protect your information assets with effective risk managementIn today’s information economy, the development, exploitation and protection of information and associated assets are key to the long-term competitiveness and survival of corporations and entire economies. The protection of information and associated assets – information security – is therefore overtaking physical asset protection as a fundamental corporate governance responsibility. Information security management system requirementsISO 27000, which provides an overview for the family of international standards for information security, states that “An organisation needs to undertake the following steps in establishing, monitoring, maintaining and improving its ISMS […] assess information security risks and treat information security risks”. The requirements for an ISMS are specified in ISO 27001. Under this standard, a risk assessment must be carried out to inform the selection of security controls, making risk assessment the core competence of information security management and a critical corporate discipline.Plan and carry out a risk assessment to protect your informationInformation Security Risk Management for ISO 27001 / ISO 27002:  Provides information security and risk management teams with detailed, practical guidance on how to develop and implement a risk assessment in line with the requirements of ISO 27001. Draws on national and international best practice around risk assessment, including BS 7799-3:2017 (BS 7799-3). Covers key topics such as risk assessment methodologies, risk management objectives, information security policy and scoping, threats and vulnerabilities, risk treatment and selection of controls. Includes advice on choosing risk assessment software.  Ideal for risk managers, information security managers, lead implementers, compliance managers and consultants, as well as providing useful background material for auditors, this book will enable readers to develop an ISO 27001-compliant risk assessment framework for their organisation and deliver real, bottom-line business benefits. Buy your copy today! About the authors Alan Calder is the Group CEO of GRC International Group plc, the AIM-listed company that owns IT Governance Ltd. Alan is an acknowledged international cyber security guru and a leading author on information security and IT governance issues. He has been involved in the development of a wide range of information security management training courses that have been accredited by IBITGQ (International Board for IT Governance Qualifications). Alan has consulted for clients in the UK and abroad, and is a regular media commentator and speaker.  Steve G Watkins is an executive director at GRC International Group plc. He is a contracted technical assessor for UKAS – advising on its assessments of certification bodies offering ISMS/ISO 27001 and ITSMS/ISO 20000-1 accredited certification. He is a member of ISO/IEC JTC 1/SC 27, the international technical committee responsible for information security, cyber security and privacy standards, and chairs the UK National Standards Body’s technical committee IST/33 (information security, cyber security and privacy protection) that mirrors it. Steve was an active member of IST/33/-/6, which developed BS 7799-3. 

Information Security Risk Management for ISO 27001/ISO 27002

Industries

Improve employee safety, reduce workplace incidents and create better, safer working conditionsAccording to a report from the ILO (International Labour Organization), there are more than 2.78 million deaths and 374 million non-fatal injuries and illnesses per year as a result of occupational accidents or work-related diseases. The ILO estimates that the annual cost to the global economy is $3 trillion (about 2.36 trillion), and in the UK alone it's estimated that 30.7 million working days were lost in 2017/2018 as a result of work-related illness and injury. Can your organisation afford to contribute to these statistics?How can ISO 45001 help?ISO 45001:2018, Occupational health and safety management systems - Requirements with guidance for use, is the international standard for creating and maintaining an occupational health and safety management system (OHSMS). The Standard provides guidance and an effective set of processes for improving worker safety and is designed to help organisations of all sizes and anywhere in the world reduce workplace injuries and illnesses.Creating and maintaining an OHSMS demonstrates employer due diligence and reasonable care, reduces workplace incidents, improves employee health, reduces absenteeism, increases productivity and creates a safer working environment for employees.Establishing an OHSMS based on ISO 45001This book provides a comprehensive explanation of the detailed requirements of ISO 45001. The author draws out key parts of the Standard, which can often be confusing for non-experts or newcomers to ISO standards, and explains what they mean and how to comply.Professionals involved in any aspect of an OHSMS, including development, documentation, implementation, training, supervision or auditing, will find the book useful. Equally, those with no background in the subject will find it a valuable resource. The book: <ul> <li>Follows a hands-on and step-by-step approach to building an OHSMS;</li> <li>Explains the purpose and the requirements of each clause of ISO 45001;</li> <li>Describes how the requirements can be fulfilled by an organisation;</li> <li>Provides definitions of the roles and responsibilities of leadership; and</li> <li>Includes numerous examples, suggestions, sample forms and procedures.</li> </ul> Suitable for HSQE professionals, project managers, lead implementers and senior management, this book demystifies the ISO 45001 Standard by presenting its contents and implementation methodology in a simple, user-friendly and easily understandable manner. Consultants, trainers and auditors will also find it a useful reference guide. Successfully establish an OHSMS and proactively reduce injury and ill-health in your organisation - buy this book today. About the author Naeem Sadiq holds a BSc in Aerospace and a Master's in Manufacturing Engineering. He is a certified lead auditor, an ASQ-certified manager and a quality systems auditor. Naeem's experience in engineering and management includes 25 years as an independent consultant, auditor and trainer for the ISO 9001, ISO 14001 and OHSAS 18001 standards. Naeem has presented a number of papers at national conferences on management system standards, and has provided consultancy, training and auditing support to more than 100 organisations. As a freelance writer, he is a regular contributor to national newspapers reporting on safety, environmental and social issues. He is also the author of two books OHSAS 18001 Step by Step - A practical guide and ISO 14001 Step by Step - A practical guide.

Establishing an occupational health & safety management system based on ISO 45001

Economics

A must-have resource for anyone looking to establish, implement and maintain an ISMS.
Ideal for information security managers, auditors, consultants and organisations preparing for ISO 27001 certification, this book will help readers understand the requirements of an ISMS (information security management system) based on ISO 27001. Similarly, for anyone involved in internal or external audits, the book includes the definitive requirements that auditors must address when certifying organisations to ISO 27001.
The book covers: <ul>
<li>
Implementation guidance – what needs to be considered to fulﬁl the requirements of the controls from ISO/IEC 27001, Annex A. This guidance is aligned with ISO/IEC 27002, which gives advice on implementing the controls; </li> <li>
Auditing guidance – what should be checked, and how, when examining the ISO/IEC 27001 controls to ensure that the implementation covers the ISMS control requirements. </li> </ul>
The implementation guidance gives clear descriptions covering what needs to be considered to achieve compliance against the requirements, with examples given throughout. The auditing guidance covers what evidence an auditor should look for in order to satisfy themselves that the requirement has been met. Useful for internal auditors and consultants, the auditing guidance will also be useful for information security managers and lead implementers as a means of confirming that their implementation and evidence to support it will be sufficient to pass an audit. This guide is intended to be used by those involved in: <ul>
<li>Designing, implementing and/or maintaining an ISMS;</li> <li>Preparing for ISMS audits and assessments; or</li> <li>Undertaking both internal and third-party ISMS audits and assessments</li> </ul>
About the author Bridget Kenyon (CISSP) is global CISO for Thales eSecurity. Her experience in information security started in 2000 with a role in network vulnerabilities at DERA, following which she has been a PCI Qualified Security Assessor, information security officer for Warwick University and head of information security for UCL, and has held a variety of roles in consultancy and academia. Bridget has been contributing to international standards since 2006, when she first joined BSI Panel 1, coordinating development of information security management system standards; she is currently editor for ISO/IEC 27014. Bridget has also co-authored three textbooks on information security. She strongly believes that “information security is fundamental to reliable business operations, not a nice-to-have”. In 2018, she was named one of the top 25 women in tech by UK publication PCR.

ISO 27001 controls – A guide to implementing and auditing

See the best price to sell, buy or rent books by the It Governance Publishing publisher. BookScouter helps to compare book prices from 25+ online bookstores and 30+ buyback vendors with a single search.

Books by It Governance Publishing