..., and implement effective controls. The ISO27000 series of International Standards represent current “best practice” for defining, auditing and managing an Information security management system (ISMS) in a systematic way. It relies on a top-down approach, identifying assets, risks to those assets and suitable...