Brian
Honan's book "Implementing
ISO 27001 In a Microsoft Windows
Environment" has recently
been published. Brian wrote
the
book
in response to the many questions
our
clients have asked in the past on
how best to put in place the various
controls and goals outlined in the
ISO 27001 Information Security
Standard.
Very often these people were mandated by their senior management to implement the standard in order to provide the business with assurances that they were using recognised best practises to secure their information assets.
However these people suddenly faced a number of major challenges.;
- They had to first become familiar with the ISO 27001 Information Security Standard and understand how it works.
- Identify what controls were applicable to their organisation based on their risk assessment and resultant required controls.
- How to ensure that the controls that required technical configurations were being properly implement
- Last but not least how to do all the above in the most effective and cost efficient manner possible.
"Implementing ISO 27001 In a Microsoft Windows Environment" addresses those issues. The book also focuses on how to leverage some of the existing Microsoft technology, such as Microsoft Windows Server 2008, Microsoft Windows Vista and various other Microsoft security tools, that most organisations have employed.
Feedback on the book has been positive with the first review stating “Overall the book accomplished exactly what the title eludes to and is a definite must have book for anyone from an Information Security Manager, to a Windows system administrator or infrastructure architect” and “I’ll definitely have this book on call in my information library.”
You can purchase the book from Amazon or directly from the IT Governance website.
2nd Digital Security Forum
Brian Honan will be speaking at the
2nd Digital Security Forum to be
held in Lisbon at the end of this
month. Brian will be giving an
Interactive case study on Identity
Theft using his experience in
stealing Marie Boran’s, from
the SiliconRepublic.com,
identity which she wrote
up and we
discussed on our Security Watch
Blog.
Certified
in the Governance of Enterprise IT
BH Consulting is pleased to announce
that our Principal Consultant Brian
Honan has been Certified in the
Governance of Enterprise IT (CGEIT)
by the IS Audit & Control
Association (ISACA).
By achieving this certification
Brian demonstrates that he has the
knowledge and experience required to
assist clients manage their
governance and compliance
requirements with regards to their
IT systems. Brian is now one
of only 3,000 people worldwide who
have been awarded this
certification.
MS3i Workshop
The
MS3i Workshop
will be held on the 11th and 12th of
June.
MS3i
"Messaging Standard for Sharing
Security Information" is an
EC-funded project to determine and
propose the requirements for an
international standard on sharing
security information. BH
Consulting participated in the
trials for this project and Brian
Honan will be presenting the
outcomes of those trials. More
details of the
workshop
are available at the
MS3i website.
ISO 27001 Risk Management Workshop
One of the key elements in
implementing an Information Security
Management System based on the ISO
27001:2005 Information Security
standard is the successful
completion of a risk assessment.
Certification
Europe will be hosting a
workshop
on how best to conduct a risk
assessment. Brian Honan will
be co-presenting the workshop.
Registration for the event is
available at
Certification
Europe's website.


