For further information, visit www.audiciaux.fr, www.scobex-rgpd-dpo.fr and www.dpo-externe-rgpd-france.fr. This book guides organisations in the implementation of ISO 27002, the standard dedicated to information security controls. It presents its framework, organisational, technical and physical measures, as well as governance strategies. It proposes a pragmatic approach including risk assessment, continuous improvement and audit preparation.