Cybersecurity and Privacy Law Handbook

Table of Contents

Preface

Part 1: Start From the Basics

1

ISO27001 – Definitions and Security Concepts

The 27k family of standards

Confidentiality, integrity, and availability

Information security concepts and definitions

Governance, policies, and incident management

Governance

Policies and procedures

Incident management

Differences between ISO 27001 and NIST

What’s NIST?

Summary

Part 2: Into the Wild

2

Mandatory Requirements

iSMS, controls, commitment, context, scope policy, and objectives

iSMS

Statement of applicability, risk treatment plan, and action plan

Controls

Commitment and project management

Identify, Protect, Detect, Respond, and Recover

Identify

Protect

Detect

Respond

Recover

Can ISO 27001 and NIST coexist?

Summary

3

Data Protection ...