This book contains the definition of several security terms, outlines the basic control characteristics of ISO 27001:2022 (2022 version), and describes:(a) 6 support approaches (ISO 27001 Implementation, ISO 27001:2022 Transition, Crafting an Information Security Strategy, a Strategy Implementation Action Plan, Developing an Information Security Policy, and ISO 27K Auditing Methodology), (b) an Information Security Strategy, (c) a Statement of Applicability, (d) a Gap Assessment, (e) an ISMS Scope Statement, (f) Assessment Questionnaires, and (g) several Recommended Compliance Measures RCMs), such as: Information Security Policy; Board and Management Security Responsibilities; Threat Intelligence Policy; Acceptable Use Policy; Data Classification Policy; User Access Authorization Policy; Password Policy; Supplier Selection.
