IT Governance: An International Guide to Data Security and ISO27001/ISO27002

I bought this thinking it would give me a grounding on ISO 27001 and that it would become a useful reference. At £40 I expected something very useful as other books from the same author(s) have been. In honesty, the book does not do much more than paraphrase ISO 27001 and ISO 27002, there are no useful insights to be had in any part of the book. The indexing is appalling. Look for subjects such as "scope", "context" and "interested parties" and you simply will not find them listed. These are key elements of starting a 27001 project, the fact that there is no reference to them of any note is a testament to the shortcomings of this book.

Excellent book. Has helped us write our policies and pass a recent audit. The book provides understanding and insight about the purpose of the different policies rather than taking a tick box approach to quality. Highly recommend this book for managers and developers alike.

Reasonably good. I'd only buy if you are implementing 27001 not an interesting read otherwise, except as a reference book.

Excellent value and speedy delivery. Excellent guide for anyone involved in InfoSec.

Quite simply if you are involved in ISO2700x and need a comprehensive overview then this is the book you have to have read.

Could offer better examples of policies, but explains in a clear manner what is expected.Very useful.

Fantastic publication..... Easy reading on what is generally thought to be a boring subject

I think it is one of the best book for ISO 27001 implementation and auditing that I have red.