(2006). ISO 27001 - Information Security Management Systems.
In: Van Bon, Jan and Tieneke, Verheijen eds.
Frameworks for IT Management.
Zaltbommel, Netherlands: Van Haren Publishing, pp. 35–44.
About the book: Modern IT managers are confronted with an overwhelming number of management frameworks, methods and methodologies – making it difficult to see the wood for the trees. In addition many IT service providers believe they can’t be taken seriously if they don’t also have a proprietary framework to offer – which makes it even more difficult to find your way through the framework forest.
This itSMF publication covers the most important frameworks in use, in a neutral and objective way, so that readers can better understand the potential value of each instrument. Each framework is described by a well-known expert in that field, in a structured format, to emphasize the specific characteristics. A consistent approach to each chapter allows easy comparision between the instruments: a description of each framework, the origin/history, where the instrument is used, description and core graphics, approach/how to, relevance to IT management, strengths and weaknesses, cross-references/relationships and links and literature.
This first edition of the itSMF Frameworks for IT Management guide contains descriptions of (in alphabetical order) AS 8015, ASL, BiSL, CobiT, eSCM, eTOM, Generic Framework for Information Management (PrimaVera), IPMA Competence Baseline, ISO/IEC 20000, (formerly BS15000), ISO 27001 (ISO 17799/BS7799), ISO 9000 (GB/T 19000), ISPL, IT Balanced Scorecard, ITIL®, ITS-CMM, PMBoK, PRINCE2®, M_o_R®, MSP, Six Sigma, TickIT, and TQM.
Actions (login may be required)