An Introduction to ISO/IEC 27001:2013

Dr. David Brewer was one of the first consultants to advise the British Government on information security matters, providing assistance to establish the first ever computer security evaluation facilities and evaluation criteria. He was a founder member of the Department of Trade and Industry's Commercial Computer Security Centre (1987-1992) and became a co-author of the European IT Security Evaluation Criteria (the forerunner of ISO/IEC 15408) and associated evaluation manual and a co-author of the original ISMS standard, BS 7799 Part 2. He is now an active member of the UK delegation to ISO JTC 1 SC27 WG1, which is responsible for the IS27000 family of standards; and is co-editor for the revision of ISO/IEC 27004 (Measurements). He has conducted a wide variety of consultancy assignments in information security spanning 32 years in over 23 countries. He is well known for his work in rolling out ISO/IEC 27001 to the whole of the Civil Service in Mauritius, which is an exemplar of his ISMS implementation methodology, and his ability to train people to train others. His seminal research papers include "The Chinese Wall Security Policy", published in 1989 and "Measuring the Effectiveness of an Internal Control System", published in 2003.