“Information Security using ISO 27001:2022” has been very well received and is now in its third print. The book’s purpose is simple yet essential: to help organisations make their information more secure, using ISO 27001 as a powerful and practical tool.

Author Ger Bothmer shows how a set of logical and pragmatic principles can form the foundation of a successful approach to information security. A valuable outcome of this approach is that it naturally results in a management system fully aligned with the requirements of ISO 27001:2022.

This book provides all the practical guidance needed to set up, implement, and maintain an Information Security Management System (ISMS). Starting from the basics, it invites readers to apply a proven and effective method within their own organisation. Each of the 93 security controls is explained in detail: why it exists, how it can be applied effectively, and which questions to ask to assess its effectiveness in an audit.

About the author:
Ger Bothmer (Roermond, the Netherlands, 1965) has been advising organisations on the design and effective implementation of management systems since 1992. His focus is on information security, quality, and business continuity, working with standards such as ISO 27001, NEN-7510, TISAX, ISO 9001, and ISO 22301.

Since 1995, Ger has also served as a Senior Subcontractor Lead Auditor for a renowned certification body. Over the years, he has worked with more than 500 organisations, either as a consultant or auditor, helping to shape or assess their management systems. Clients describe his approach as thorough, pragmatic, and highly relevant.