This book serves as a basic introduction to ISO/IEC 27001:2012, and a straight-forward guide to implementation. This will be a simple to understand 'pocket guide' packed with useful how-to information The guidance will be applicable to a wide range of differing ISMS implementations appropriate to SMEs as well as much larger organisations The book will also include a practical, easy to use assessment/risk treatment method that delivers results directly expressed in business meaningful terms (i.e. the likelihood that information security events occur and their probable consequences). No prior knowledge of ISO/IEC 27001 or management systems is assumed.