Information protection means much more when compared to a technology option, and requires buy-in from senior managers and the collaboration of most staff in the organisation. By looking at ISO27001 and ISO27002 jointly, this pocket guideline gives a wider view of what it means to implement an ISO27001 ISMS.