Maria sighed as she considered her new assignment. It had seemed like a great idea when Iris offered her the role, but now she wondered if she could get her arms around the complex process of getting RWW certified as an ISO 27000-compliant organization. After reviewing the outline of the training class she would soon attend, she pulled out a notepad and began outlining the RWW compliance project. She hoped she could find a useful set of documents to prepare her for this project.

Discussion Questions

1. Which documents should Maria read before her class?
2. Based on what you know about ISO 27000 program certification, what are the major steps of the process Maria will have to oversee?