IT Governance Blog on IT governance, risk management, compliance and information security.

If you have any excess funds available from this financial year, now is the time to procure the vital resources needed to succeed in projects planned for later this year. In spite of budget cuts, and an uncertain economic climate, information security will continue you be one of the most important issues facing an organisation throughout 2010 and beyond.

(more…)

Find out more about our range of information security training courses which will help you and your organisation make the most of 2010. Book now and use any remaining funds from the 2009/2010 financial year before your budget is slashed in the next financial year!

• ISO27001 Foundation Course – 1 Day
• ISO27001 ISMS Implementation Masterclass – 3 Days
• Certificated ISO 27001 Internal Auditor Training Course – 2 Days
• ISO27OO1 Certificated Lead Auditor Training Course – 4.5 Days
• PCI DSS Introduction, Implementation & Compliance Masterclass – 1 Day

Our fast-growing training division offers a wide range of IT governance and information security training courses, both public and in-house, as well as a comprehensive range of training courses that lead to accredited certifications.

(more…)

Our next Implementing ISO20000 (ISO20000 Consultant Certificate) Training Course will be held in London between 17-19 May 2010.

Seats are filling up fast! Be sure to reserve your place in plenty of time to avoid disappointment!

This outstanding London training course – delivered by IT Governance’s own expert trainers – prepares the IT practitioner or ISO20000 project manager to implement ISO/IEC 20000 in an organisation.

(more…)

Meet compliance requirements for information security and PCI DSS with the help of our toolkits. There is currently added value offers available which expire at Midnight this Friday 19th February 2010!

Order before Friday and get 5 Pocket Guides FREE!

Purchase this toolkit before Friday and get PCI DSS: A Pocket Guide Free!

(more…)

Hi,

The long awaited international standard to the implementation of an information security management system,
ISO/IEC 27003:2010, is now available.

It’s a must have -

Buy the hard copy here:
http://www.itgovernance.co.uk/products/2906;

or the download here:
http://www.itgovernance.co.uk/products/2905.

Key Features and Benefits:

• The first standard to offer comprehensive guidance on implementing an ISO/IEC 27001:2005 ISMS. Using this standard during an ISMS implementation will improve your organisation’s chances of becoming ISO/IEC 27001 certified.
• Fully aligned with the rest of the ISO/IEC 27000 family of standards, meaning the strengths of all of the ISO/IEC 27000 standards together can be leveraged. Bringing about a higher level of information security, compliance, and cost savings, etc
• Written in a generic, practical manner, making the advice and guidance within applicable no matter the size, type or location of your organisation.

(more…)

Every organization who collects, owns or licenses personal information about a resident of Massachusetts will have to be in full compliance with 201 CMR 17.00 on or before March 1, 2010.

The term “personal information” is defined so broadly that nearly every Massachusetts business must comply with the regulations.

Specifically, personal information is defined as an individual’s name, accompanied by one or more of the following:

• Social Security number,
• driver’s license,
• state ID number, or
• financial account number (bank accounts, credit cards).

It is hard to imagine any Massachusetts businesses that do not handle or maintain personal information!
(more…)

Our No 3 Comprehensive ISO27001 ISMS Toolkit contains all the resources and tools an organisation will need to become ISO27001 certification-ready, and if you purchase it before midnight on Friday (29th January 2010), you will receive an immediate free download of 5 added value pocket guides!

Free Pocket Guides Included: Data Protection Compliance in the UK; ISO 27001 A Pocket Guide; ISO 27001 Assessments Without Tears: A Pocket Guide; IT Regulatory Compliance in North America: A Pocket Guide; Risk Assessment for Asset Owners: A Pocket Guide.

These 5 pocket guides compliment the toolkit well and will help to speed up your learning and your project!

The No 3 ISO/IEC27001 Comprehensive ISMS toolkit contains:
(more…)

Comply with the Massachusetts Data Protection Law – 201 CMR 17.00

Do you have an information security management system which complies to ISO27001?

The The 201 CMR 17.00 Upgrade Toolkit will help you to avoid regulatory noncompliance with the 201 CMR 17.00 Law!

Buy the The 201 CMR 17.00 Upgrade Toolkit

to assure success at your next surveillance audit and/or state examination.
(more…)

Use this unique toolkit to accelerate your ISO 27001 project and develop an ISO27001-compliant Information Security Management System (ISMS).

Implementing ISO/IEC 27001 and creating an effective Information Security Management System for the first time can be challenging!

The No 3 ISO27001 Comprehensive ISMS Toolkit has everything you will need. When you use our highly practical and informative books and tools to help you tackle the project, you receive unique guidance and support for your organisation – plus, with this package, you save money!
(more…)

Comply with the Massachusetts Data Protection Law – 201 CMR 17.00

The 201 CMR 17.00 & ISO 27001 Toolkit Will save you months of work, help you avoid costly trial-and-error dead-ends, and ensure everything is covered to current 201 CMR 17.00 / ISO 27001 standard.

This ISMS (201 CMR 17.00/ISO 27001) Documentation Toolkit contains:

(more…)