Chapter 0: Introduction. Chapter 1: Bridging the Gap. 1.1 About This Book. 1.2 How to Use This Book. 1.3 Why Are You Here -- and How This Book Can Help.
Chapter 2: ISO - Order in a Chaotic World. 2.1 ISO: A Short History. 2.2 How ISO Standards Are Born. 2.3 What ISO Standards Really Do. 2.
4 Types of ISO Standards. 2.5 The One That Protects Them All. 2.6 Quiz #1. Chapter 3: Building an ISMS That Works. 3.1 What Is Information Security (Really)?.
3.2 What Is an Information Security Management System (ISMS)?. 3.3 What Makes an ISMS Work?. 3.4 Key Principles That Support an Effective ISMS. 3.5 Why Organizations Need an ISMS.
3.6 How ISO 27001 Fits In. 3.7 Why ISO 27001 Matters. 3.8 Brief History of ISO 27001. 3.9 Meet the Family: ISO/IEC 27000 Series.
3.10 Know the Standards, Use Them Well. 3.11 Quiz #2. Chapter 4: The Backbone of ISO/IEC 27001, Structure and Strategy. 4.1 Introduction: So Far, So Good?. 4.
2 Why Structure Matters in Standards. 4.3 The Harmonized Clause Structure. 4.4 A Little Secret About All ISO Standards. 4.5 Why Clauses 4-10 Matter So Much. 4.
6 So, Why Are These Clauses So Important?. 4.7 You Can''t Pick and Choose. 4.8 Not All Clauses Are Created Equal. 4.9 Process-Based Thinking: Seeing the Bigger Picture. 4.
10 Why does this matter for ISO 27001?. 4.11 PDCA and the Process Approach: The Engine Behind the ISMS. 4.12 A Quick Trip Back in Time: Meet Mr. Deming. 4.13 PDCA in ISO 27001: The Hidden Map.
4.14 PDCA + Process Thinking = Your ISMS in Action. 4.15 Risk-Based Thinking: The Real Reason ISO 27001 Exists. 4.16 Follow the Risk, Not the Routine. 4.17 So, What Is Risk-Based Thinking?.
4.18 Risk Is Not Just a Section -- It''s the Theme. 4.19 Quiz #3. Chapter 5: Terms You''ll Hear Again and Again. 5.1 ISO/IEC 27000: The Vocabulary Standard. 5.
2 Core ISMS Terms You''ll Encounter Often. 5.3 Quiz #4. Chapter 6: What You Must Deliver and Document. 6.1 Where Do ISMS Requirements Come From?. 6.2 Requirement â Documentation -- But One Often Leads to the Other.
6.3 ISO/IEC 27001:2022 -- Mandatory Documents You Need. 6.4 Building Your ISMS Documentation Framework Early. 6.5 The Danger of Copy-Paste Compliance. 6.6 Clause 7.
5.2: Documented Information That Works. 6.7 Clause 7.5.3: Controlling What You Create. 6.8 ISMS Documentation Template.
6.9 Quiz #5. 6.10 Answer Key: Implementation Task 1. Chapter 7: From Gap to Gantt, Your ISMS Project Starts Here. 7.1 Why Gap Analysis Is the First Real Step. 7.
2 Gantt Chart. 7.3 Quiz #6. 7.4 Case 1: The Data Fortress in Nairobi. Chapter 8: Clause 4 -- Understand Your World Before You Secure It. 8.1 Guiding Principles for Every Clause.
8.2 Why Context Matters in ISO 27001. 8.3 Clause 4.1: Understanding the organization and its context. 8.4 Clause 4.2: Understanding the needs and expectations of interested parties.
8.5 Understanding the Climate-Change Amendment. 8.6 Clause 4.3: Determining the scope of the ISMS. 8.7 Clause 4.4: Information security management system.
8.8 Quiz #7. 8.9 Case 2: Monsoons, Markets, and Messy Chennai Politics. Chapter 9: Clause 5 -- Leadership Isn''t Optional. 9.1 Clause 5.1: Leadership and commitment.
9.2 Clause 5.2: Policy. 9.3 Clause 5.3: Organizational roles, responsibilities, and authorities. 9.4 Quiz #8.
9.5 Case 3: Leadership on the Line -- Abu Dhabi. Chapter 10: Clause 6 -- Plan Your Risks, Control Your Future. 10.1 Beyond This Chapter: Where to Learn More About Risk. 10.2 A Quick Refresher: Risk Management. 10.
3 Clause 6.1: Actions to address risks and opportunities. 10.4 Clause 6.1.2: Information security risk assessment. 10.5 Clause 6.
1.3: Information security risk treatment. 10.6 Clause 6.2: Information security objectives and planning to achieve them. 10.7 Clause 6.3: Planning of changes.
10.8 Quiz #9. 10.9 Case 4: Planning in Motion -- Singapore. Chapter 11: Clause 7 -- Empower Your People, Manage Your Info. 11.1 Clause 7.1: Resources.
11.2 Clause 7.2: Competence. 11.3 Clause 7.3: Awareness. 11.4 Clause 7.
4: Communication. 11.5 Clause 7.5: Documented information. 11.6 Quiz #10. 11.7 Case 5: Culture, Calls, and Quiet Change -- Hyderabad.
Chapter 12: Clause 8 -- Put Your ISMS Into Action. 12.1 Clause 8.1: Operational planning and control. 12.2 Clause 8.2: Information security risk assessment. 12.
3 Clause 8.3: Information security risk treatment. 12.4 Quiz #11. 12.5 Case 6: Risk, Rollouts, and Reality -- Lagos. Chapter 13: Clause 9 -- Is It Working? Evaluate and Improve. 13.
1 Clause 9.1 Monitoring, measurement, analysis, and evaluation. 13.2 Clause 9.2 Internal audit. 13.3 Clause 9.3 Management review.
13.4 Quiz #12. 13.5 Case 7: Wheels, Audits, and Wake-Up Calls -- Kigali. Chapter 14: Clause 10 -- Get Better, Stay Better. 14.1 Clause 10.1 Continual improvement.
14.2 Clause 10.2 Nonconformity and corrective action. 14.3 Quiz #13. 14.4 Case 8: A Loop of Fixes -- London. Chapter 15: Preparing for ISO 27001 Certification.
15.1 Why Consider ISO 27001 Certification?. 15.2 Choosing the Right ISO 27001 Certification Body. 15.3 Understanding the ISO 27001 Three-Year Certification Cycle. 15.4 Your ISO 27001 Journey -- The Road Ahead.
Chapter 16: Practice Paper. Chapter 17: Quiz Compass. Chapter 18: Case Answer Key and Reflections. Chapter 19: Practice Paper - Answers and Explanations. Chapter 20: List of Tables. Chapter 21: Index. Bibliography.