Find the expert you need
Choose a service
Or choose a subject
If you need technical support, please visit our Contact us page.
Hey there! We've noticed you're visiting us from the United States. Click the button below to visit the US version of our website for the best user experience.

Effective cyber resilience requires a culture of preparedness that considers risk management and recovery planning to be at least as important as cyber defences.
This book discusses:
Paperback formats are available for all IT Governance Publishing titles on request.
Please contact us for further information:
This book will explore the core principles of cyber resilience and explain how you can use ISO 27001 and ISO 22301 to implement a cyber resilience programme in your organisation. By the end of the book, you will understand how to implement both standards and combine them to form an effective, integrated system that will both enhance cyber security and ensure your organisation can respond effectively to a cyber attack or disruption.
Andrew Pattison
Andrew Pattison is the Global Head of GRC and PCI Consultancy at IT Governance, a GRC Solutions company. With a career stretching back to the mid-1990s, Andrew has worked extensively in information security, risk management and business continuity. He is currently supporting several major international organisations implement robust governance and risk approaches for the use and development of AI. He holds an MSc in Information Systems Management, is a certified auditor, and is accredited with both CISM® and CRISC® certifications. Alongside his consultancy work, Andrew has delivered comprehensive training across multiple GRC disciplines, including DORA, NIS, NIST, ISO/IEC 27001, business continuity, CRISC and CISM.