ISO/IEC 27001 Lead Implementer: What the First 90 Days of a Real ISMS Look Like

Most ISMS projects fail in the first quarter, not the last. A practitioner's account of scoping, risk assessment, Statement of Applicability and evidence design — and where implementations most often go wrong.