A good place for good tips and info on ISO27001

ISO27001security dotcom is a vendor-neutral website dedicated to promoting the ISO/IEC 27000-family international standards for Information Security Management Systems (“ISO27k”).

The ISO27k standards provide intgernationally-accepted best practice guidance on protecting the confidentiality, integrity and availability of the information and information systems on which we all depend.

Three ISO27k standards are already released and publicly available:

• ISO/IEC 27001, the Information Security Management System certification standard;
• ISO/IEC 27002, the code of practice for information security management with advice on a broad range of controls;
• ISO/IEC 27006, a guide to the ISMS certification process for certification bodies.

Here