Books — the smart way to learn about management system standards
Books by Dr David Brewer
An introduction to ISO/IEC 27001:2013
What the experts say
‘An excellent book – the ultimate guide to ISO/IEC 27001:2013 – a must have book whether you are an existing registration or considering it. Offers practical and pragmatic guidance to practitioners.’
Sabrina Feng, Chief Technology Risk Officer, London Stock Exchange Group
Understanding the new ISO management system requirements
This book is a “must-have” for organizations and individuals keen on ensuring a smooth transition and obtaining maximum benefit from their investment in having a management system.
No prior knowledge of management systems is assumed.
In April 2012, ISO updated its directives. There was a new annex – Annex SL (renamed in 2019 as Annex L) – which defines the High Level Structure and Identical Core Text for all new and revised management system standards. The concept is that some requirements, e.g. management review, are common to all management system standards and therefore ought to be identically worded.
The book explains the new requirements and how they are related to those in management system standards published prior to the advent of the new ISO directives. It shows how familiar concepts have metamorphosed into new ones. It provides fresh insights into understanding management system standards and thereby gives guidance on how to develop a management system for the first time.
ISO/IEC 27001 — Mastering Risk Assessment and the Statement of Applicability
About the author
Dr David Brewer has over thirty-five years’ worldwide experience in working with management systems as a standards maker, consultant, auditor, tutor and management system administrator, the past several years running several integrated management systems. He was one of the first consultants to advise the British Government on information security matters, helping to establish the first ever computer security evaluation facilities and evaluation criteria. He was a founder member of the Department of Trade and Industry’s Commercial Computer Security Centre (1987-1992) and became co-author of the European IT Security Evaluation Criteria (the forerunner of ISO/IEC 15408) and its associated evaluation manual. He was co-author of the original ISMS standard, BS 7799 Part 2 and Head of the UK delegation to ISO JTC 1 SC27 WG1, which is responsible for the ISO 27000 family of standards. Recently he was the editor for the revision of ISO/IEC 27004 (Monitoring, measurement, analysis and evaluation) and a co-author of BS 7799-3:2017 (Guidelines for information security risk management (revision of BS ISO/IEC 27005:2011)).
David has conducted a wide variety of consultancy assignments in information security spanning 39 years in over 23 countries. He is well known for his work in rolling out ISO/IEC 27001 to the whole of the Civil Service in Mauritius (an exemplar of his ISMS implementation methodology), and for his ability to train people to train others. His seminal research papers include: The Chinese Wall Security Policy, published in 1989; and Measuring the Effectiveness of an Internal Control System, published in 2003.
you consent to that site setting authentication session cookies
|© IMS-Smart Limited, 2019-21|
|Page last updated: July 11, 2021|