Alan Calder Books

Focusing on organizational readiness, this book explores essential strategies and frameworks to help businesses anticipate and respond to challenges effectively. It emphasizes the importance of proactive planning, risk management, and adaptability in fostering resilience. Through practical insights and case studies, readers will learn how to assess their current preparedness and implement necessary changes to thrive in a dynamic environment. The goal is to empower organizations to navigate uncertainties and seize opportunities for growth.

Focusing on the essential principles of IT governance, this book provides a comprehensive framework for aligning IT strategies with business goals. It explores key topics such as risk management, compliance, and performance measurement, offering practical insights for effective decision-making. Readers will gain an understanding of how to implement governance frameworks that enhance organizational efficiency and drive innovation, making it a valuable resource for IT professionals and business leaders alike.

The perfect introduction to the principles of information security management and ISO27001:2013

Prepare for, recognise and survive ransomware attacks with this essential guide which sets out clearly how ransomware works, to help business leaders better understand the measures that can be put in place to protect the organisation.

Organisations will need to take action to implement effective compliance measures. Failure to comply could result in fines of up to 4% of annual global turnover or 20 million. This guide is essential reading for organisations wanting an easy to follow overview of the new regulation and the compliance obligations for handling data of EU citizens.

Information is the currency of the information age and in many cases is the most valuable asset possessed by an organisation. Information security management is the discipline that focuses on protecting and securing these assets against the threats of natural disasters, fraud and other criminal activity, user error and system failure. Effective information security can be defined as the ‘preservation of confidentiality, integrity and availability of information.’ This book describes the approach taken by many organisations to realise these objectives. It discusses how information security cannot be achieved through technological means alone, but should include factors such as the organisation’s approach to risk and pragmatic day-to-day business operations.

Business continuity management is essential for organizations seeking to ensure resilience against disruptions. The book provides practical strategies and frameworks to help businesses prepare for and respond to crises effectively. It emphasizes risk assessment, recovery planning, and the importance of communication during emergencies. By implementing the principles outlined, organizations can safeguard their operations, protect their assets, and maintain stakeholder trust in the face of unexpected challenges.

Focusing on IT governance best practices, this guide provides a comprehensive approach to developing a robust information security management system. It emphasizes compliance and effectiveness, offering strategies and frameworks to ensure organizations can safeguard sensitive information. The book outlines key principles, methodologies, and practical steps for implementing security measures that align with regulatory requirements and industry standards, making it an essential resource for IT professionals and security managers.

Information is the currency of the information age and in many cases is the most valuable asset possessed by an organisation. Information security management is the discipline that focuses on protecting and securing these assets against the threats of natural disasters, fraud and other criminal activity, user error and system failure. This Management Guide provides an overview of the two international information security standards, ISO/IEC 27001 and ISO 27002. These standards provide a basis for implementing information security controls to meet an organisation’s own business requirements as well as a set of controls for business relationships with other parties. This Guide provides: An introduction and overview to both the standards The background to the current version of the standards Links to other standards, such as ISO 9001, BS25999 and ISO 20000 Links to frameworks such as CobiT and ITIL Above all, this handy book describes how ISO 27001 and ISO 27002 interact to guide organizations in the development of best practice information security management systems.

US organizations processing the personal data of EU residents must comply with the new EU General Data Protection Regulation (GDPR) from May 25 2018. Failure to comply could result in fines of up to 4% of annual global turnover or €20 million.This concise guide is essential reading for US organizations wanting an easy to follow overview of the new regulations and the compliance obligations for handling data of EU citizens, including guidance on the EU-US Privacy Shield.