ISO 27001 Controls - a Guide to Implementing and Auditing, Second Edition

Bridget Kenyon's foray into fiction with 'ISO 27001 Controls' is a bold attempt to merge the methodical world of information security with the expansive realm of storytelling. It is a novel that does not merely inform but transforms the ostensibly mundane into something engaging. Kenyon's background in cybersecurity is evident throughout the text, lending a credibility to the technical discussions that underpin the narrative. This book dares to imagine a world where the implementation of ISO 27001 controls is not just a requirement but an adventure, a concept that is as ambitious as it is unique.

The narrative structure of the book is its most compelling feature. Kenyon employs a non-linear style, weaving together multiple timelines and perspectives to create a tapestry that is both intricate and illuminating. The characters, drawn from various backgrounds within the tech industry, provide a diverse range of viewpoints that enrich the story. Each character’s journey through the labyrinthine depths of cybersecurity protocols is both a personal journey and a commentary on the nature of technology in our lives. The novel invites readers to consider how security controls can be seen as both a protective measure and a narrative device.

Kenyon's prose is precise, reflecting her expertise in the subject matter, yet she manages to infuse it with a sense of drama and urgency. The detailed descriptions of audits and implementations are balanced by moments of introspection and personal conflict faced by the characters. These moments bring a human element to the book, ensuring that even the most technical passages remain accessible to readers without a background in cybersecurity. Kenyon's ability to maintain this balance is a testament to her skill as a writer and her deep understanding of her subject.

However, the book is not without its faults. The blending of fiction with technical manual sometimes results in a narrative that feels disjointed. There are moments where the plot seems to pause for lengthy, detailed explanations of ISO 27001 standards, which might disrupt the flow for readers seeking a more conventional narrative experience. Additionally, some characters remain underdeveloped, serving more as mouthpieces for technical exposition than as fully realized individuals. This can detract from the novel's emotional impact, leaving certain narrative arcs feeling incomplete.

Overall, 'ISO 27001 Controls' is a daring work that challenges the boundaries between fiction and reality. While it may not satisfy purists in either domain, its innovative approach deserves recognition. Kenyon has crafted a novel that not only entertains but educates, offering a new perspective on the role of cybersecurity in our lives. It is a book that encourages thoughtful reflection on the systems we rely on and the stories we tell about them. For those willing to navigate its complexities, it offers a rewarding and enlightening experience.