Nine Steps to Success: North American edition - An ISO 27001 Implementation Overview

INTRODUCTION

Cyber risk has become a critical business issue, with senior management increasingly under pressure—from customers, regulators, and partners—to ensure their organization can defend against, respond to, and recover from cyber attack.

Resilience against cyber attack requires an organization to defend itself across all of its attack surface: people, process, and technology. Significant investment in technological defenses are inadequate without at least commensurate investment in people and process; breaches in the people and process domains can be more devastating than those that come through inadequate technology. Effective cybersecurity therefore requires a comprehensive, systematic, and robust information security management system ...