Collateral: Securing Information and Trust Using ISO 27001 (Paperback) (ISBN-13: 9781918825091)

Every organisation has objectives. And every organisation operates in a context that shapes how achievable those objectives are - political shifts, economic uncertainty, social pressures, technological change, legal obligations, environmental forces, and the ethical expectations of the people they serve. That context has never been more volatile, and there is no sign of it settling. Managing it isn't optional. It's the difference between objectives that get delivered and objectives that get derailed.

Nick Hargreaves built Hartfield Community Credit Union's information security management system with care. The controls are documented. The monitoring is configured. The procedures are signed. He walks the floor every evening. What he doesn't know is that one of his team has been passing information to organised crime for seven months - recruited not through greed or ideology, but through friendship, flattery, and a debt that was engineered to be unpayable. The system that finds him isn't a hero. It's six months of access logs that nobody had been reading, analysed in six hours by a consultant who understood that data you collect but don't review isn't a control. It's an alibi.

Organisations that adopt systematic information security discover that the benefits reach further than certification alone. Certification gets you economy class - you meet the requirements, you stay in your seat, you arrive. But organisations that invest in systematic thinking get something different. The framework that manages one risk builds capability for the next. The investment that protects one objective strengthens several others. The discipline that solves today's problem creates resilience for tomorrow's. That's first class - and that's what Collateral is about.