ISO 27001:2005 replaced the information security standard BS7799-2 from October, 2005. This book offers practical guidance on achieving ISO 27001 certification. It shows: how to get management and board buy-in; how to get cross-organizational, cross functional buy-in; the gap analysis - 'how much do you really need to do?'; and more.