Summary

Do you remember The Hitchhiker’s Guide to the Galaxy, one of the funniest sci-fi books of all time? Well, we can imagine ISO 27001 as the famous towel from The Hitchhiker’s Guide to the Galaxy: we can use both the towel and ISO 27001 in several ways, alongside other frameworks, both reassure us, and from time to time we need to clean them to avoid issues.

So, the chapter is over. We covered how to formally (although this is not strictly necessary if your company doesn’t require a certification) write an iSMS with all the bells and whistles, and then moved on to look at how ISO 27001 works in the real world. Then, we did the same for the NIST framework and saw whether ISO 27001 and NIST can coexist.

In the next chapter, we will be covering data protection, with a big focus on GDPR and some mapping with other privacy laws around the globe.