Books — the smart way to learn about management system standards |
![]() |
|||||||
Books by Dr David Brewer Insights into ISO/IEC 27001:2022 Annex A![]()
The book has been written in the style of a mystery. The first four chapters set the scene, each finishing with a conclusion in the form of a perplexing statement or question. The final chapter, like all good mystery stories, resolves all the issues and permits Annex A and the SOA to be regarded in a more refreshing light. The book reexamines Annex A 15 years after David Brewer and Michael Nash published their paper “Insights into the ISO/IEC 27001 Annex A”, in 2010.
An introduction to ISO/IEC 27001:2022/Amd 1:2024![]()
What the experts say‘An excellent book – the ultimate guide to ISO/IEC 27001:2022 – a must have book whether you are an existing registration or considering it. Offers practical and pragmatic guidance to practitioners.’ Sabrina Feng, Chief Technology Risk Officer, London Stock Exchange Group
![]() ISO/IEC 27001:2022 — Mastering Risk Assessment and the Statement of Applicability
About the authorDr David Brewer has over thirty-five years’ worldwide experience working with management systems as a standards maker, consultant, auditor, tutor, and integrated management system administrator. Hewas one of the first consultants to advise the British Government on information security matters, helping to establish the first ever computer security evaluation facilities and evaluation criteria. He was a founder member of the Department of Trade and Industry’s Commercial Computer Security Centre (1987-1992) and became co-author of the European IT Security Evaluation Criteria (the forerunner of ISO/IEC 15408) and its associated evaluation manual. He was co-author of the original ISMS standard, BS 7799 Part 2 and a former head of the UK delegation to ISO JTC 1 SC27 WG1, which is responsible for the ISO 27000 family of standards. He is the editor for the revision of ISO/IEC 27000 (ISMS Overview) and ISO/IEC 27004 (Monitoring, measurement, analysis and evaluation). David has conducted a wide variety of consultancy assignments in information security spanning 43 years in over 23 countries. He has assisted many clients to establish their ISMS and has first-hand experience in the maintenance and improvement of two of them. His seminal research papers include: The Chinese Wall Security Policy, published in 1989; Measuring the Effectiveness of an Internal Control System, published in 2004 and Insights into the ISO/IEC 27001 Annex A, published in 2010. |
||||||||
![]() |
![]() |
|||||||
This site does not use cookies, but if you logon to an IMS-Smart product you consent to that site setting authentication session cookies |
||||||||
© IMS-Smart Limited, 2019-25 | ||||||||
Page last updated: July 10, 2025 | ||||||||