Steve Watkins – författare

Protect your information assets with effective risk management

In today’s information economy, the development, exploitation and protection of information and associated assets are key to the long-term competitiveness and survival of corporations and entire economies. The protection of information and associated assets – information security – is therefore overtaking physical asset protection as a fundamental corporate governance responsibility. 

Information security management system requirements

ISO 27000, which provides an overview for the family of international standards for information security, states that “An organisation needs to undertake the following steps in establishing, monitoring, maintaining and improving its ISMS […] assess information security risks and treat information security risks”. The requirements for an ISMS are specified in ISO 27001. Under this standard, a risk assessment must be carried out to inform the selection of security controls, making risk assessment the core competence of information security management and a critical corporate discipline.

Plan and carry out a risk assessment to protect your information

Information Security Risk Management for ISO 27001 / ISO 27002:

Ideal for risk managers, information security managers, lead implementers, compliance managers and consultants, as well as providing useful background material for auditors, this book will enable readers to develop an ISO 27001-compliant risk assessment framework for their organisation and deliver real, bottom-line business benefits.

Buy your copy today!

About the authors

Alan Calder is the Group CEO of GRC International Group plc, the AIM-listed company that owns IT Governance Ltd. Alan is an acknowledged international cyber security guru and a leading author on information security and IT governance issues. He has been involved in the development of a wide range of information security management training courses that have been accredited by IBITGQ (International Board for IT Governance Qualifications). Alan has consulted for clients in the UK and abroad, and is a regular media commentator and speaker. 

Steve Watkins is an executive director at GRC International Group plc. He is a contracted technical assessor for UKAS – advising on its assessments of certification bodies offering ISMS/ISO 27001 and ITSMS/ISO 20000-1 accredited certification. He is a member of ISO/IEC JTC 1/SC 27, the international technical committee responsible for information security, cyber security and privacy standards, and chairs the UK National Standards Body’s technical committee IST/33 (information security, cyber security and privacy protection) that mirrors it. Steve was an active member of IST/33/-/6, which developed BS 7799-3. 

Faced with the compliance requirements of increasingly punitive information and privacy-related regulation, as well as the proliferation of complex threats to information security, there is an urgent need for organizations to adopt IT governance best practice. IT Governance is a key international resource for managers in organizations of all sizes and across industries, and deals with the strategic and operational aspects of information security. Now in its seventh edition, the bestselling IT Governance provides guidance for companies looking to protect and enhance their information security management systems (ISMS) and protect themselves against cyber threats. The new edition covers changes in global regulation, particularly GDPR, and updates to standards in the ISO/IEC 27000 family, BS 7799-3:2017 (information security risk management) plus the latest standards on auditing. It also includes advice on the development and implementation of an ISMS that will meet the ISO 27001 specification and how sector-specific standards can and should be factored in. With information on risk assessments, compliance, equipment and operations security, controls against malware and asset management, IT Governance is the definitive guide to implementing an effective information security management and governance system.

In 1988 several white managers of the Shoney’s restaurant chain protested against the company’s discriminatory hiring practices, including an order to blacken the “O” in “Shoney’s” on minorities’ job applications so that the marked forms could be discarded. When the managers refused to comply, they lost their jobs but not their resolve—they sued the company. Their case grew into the largest racial job discrimination class action lawsuit of its time. Shoney’s eventually offered to settle out of court, and the nearly 21,000 claimants divided a $132.5 million settlement, bringing to an abrupt end a landmark case that changed corporate attitudes nationwide.The Black O is a fascinating, behind-the-scenes story populated with many unforgettable characters, including civil rights lawyer Tommy Warren, the former college football star and convicted felon who took the case; Ray Danner, the ironfisted former CEO who developed the Shoney’s concept; and Justice Clarence Thomas, former head of the Equal Employment Opportunity Commission, which sat idly by for years while complaints mounted against Shoney’s. The Black O speaks to an issue that continues to have great urgency, serving as a stark refutation that the civil rights movement eliminated systemic discrimination from the workplace.

In 1988 several white managers of the Shoney’s restaurant chain protested against the company’s discriminatory hiring practices, including an order to blacken the “O” in “Shoney’s” on minorities’ job applications so that the marked forms could be discarded. When the managers refused to comply, they lost their jobs but not their resolve—they sued the company. Their case grew into the largest racial job discrimination class action lawsuit of its time. Shoney’s eventually offered to settle out of court, and the nearly 21,000 claimants divided a $132.5 million settlement, bringing to an abrupt end a landmark case that changed corporate attitudes nationwide.The Black O is a fascinating, behind-the-scenes story populated with many unforgettable characters, including civil rights lawyer Tommy Warren, the former college football star and convicted felon who took the case; Ray Danner, the ironfisted former CEO who developed the Shoney’s concept; and Justice Clarence Thomas, former head of the Equal Employment Opportunity Commission, which sat idly by for years while complaints mounted against Shoney’s. The Black O speaks to an issue that continues to have great urgency, serving as a stark refutation that the civil rights movement eliminated systemic discrimination from the workplace.

It’s the fall of 1966, and twelve-year-old Dewey Turner is determined to start the school year right. No more being the butt of every joke. He’ll be cool—a Lone Wolf like his older brother, Wayne. But an accident with shoe polish dashes these hopes—and earns Dewey his worst nickname yet. He finds an unlikely friend in Darla Turkel, the only person at Sand Mountain High who is more of an outcast than he is. Through their friendship, Dewey comes to learn a whole lot about his small town, and about the world outside it, too: things about racism and segregation, secrets, and standing up for what’s right.

“There is neither too much nostalgia nor message, and readers will be haunted by the drama of harsh secrets close to home.” —Booklist (starred review)

“Watkins pulls off an incredible feat in this novel capturing the racial prejudices and Vietnam War tensions of the era.” —Voice of Youth Advocates

Heart-wrenching and real, Juvie is the story of two sisters grappling with sacrifice, accountability—and who’ll be there to help you up after you take the fall.

Sadie Windas has always been the responsible one — she’s the star player on her AAU basketball team, she gets good grades, she dates a cute soccer player, and she tries to help out at home. Not like her older sister, Carla, who leaves her three-year-old daughter, Lulu, with Aunt Sadie while she parties and gets high. But when both sisters are caught up in a drug deal — wrong place, wrong time — it falls to Sadie to confess to a crime she didn’t commit to keep Carla out of jail and Lulu out of foster care. Sadie is supposed to get off with a slap on the wrist, but somehow, impossibly, gets sentenced to six months in juvie. As life as Sadie knew it disappears beyond the stark bars of her cell, her anger — at her ex-boyfriend, at Carla, and at herself — fills the empty space left behind. Can Sadie forgive Carla for getting her mixed up in this mess? Can Carla straighten herself out to make a better life for Lulu, and for all of them? Can Sadie survive her time in juvie with her spirit intact?

A gripping portrait of a teen''s struggles through grief and abuse—and the miraculous power of animals to heal us.

After her veterinarian dad dies, sixteen-year-old Iris Wight must leave her beloved Maine to live on a North Carolina farm with her hardbitten aunt and a cousin she barely knows. Iris, a vegetarian and animal lover, immediately clashes with Aunt Sue, who mistreats the livestock, spends Iris''s small inheritance, and thinks nothing of striking Iris for the smallest offense. Things come to a head when Iris sets two young goats free to save them from slaughter, and an enraged Aunt Sue orders her brutish son, Book, to beat Iris senseless—a horrific act that lands Book and his mother in jail. Sent to live with an offbeat foster family and their "dooking" ferrets, Iris must find a way to take care of the animals back at the farm, even if it means confronting Aunt Sue. Powerful and deeply moving, this compelling novel affirms the redemptive power of animals and the resilience of the human spirit.

The stories behind the 50 greatest games in Bengals history, sure to spark much interest and argument among legions of loyal fans

Who can forget the famous “Freezer Bowl” AFC championship victory over the San Diego Chargers or the heart-stopping Super Bowl classic against the San Francisco 49ers and Joe Montana? Watkins and Maloney set the stage for these and other memorable games, detailing the big plays, stunning comebacks, and fantastic finishes and painting a picture that makes fans feel as though they were there.

Classic Bengals: The 50 Greatest Games in Cincinnati Bengals History includes a list of the 50 greatest games by opponent, “near misses” that almost made the list, stats on each game, and an insightful foreword from “Mr. Bengal,” Dave Lapham, who has played or broadcast games for the team in 42 of its 50 seasons.

The stories behind the 50 greatest games in Bengals history, sure to spark much interest and argument among legions of loyal fans

Who can forget the famous "Freezer Bowl" AFC championship victory over the San Diego Chargers or the heart-stopping Super Bowl classic against the San Francisco 49ers and Joe Montana? Watkins and Maloney set the stage for these and other memorable games, detailing the big plays, stunning comebacks, and fantastic finishes and painting a picture that makes fans feel as though they were there.

Classic Bengals: The 50 Greatest Games in Cincinnati Bengals History includes a list of the 50 greatest games by opponent, "near misses" that almost made the list, stats on each game, and an insightful foreword from "Mr. Bengal," Dave Lapham, who has played or broadcast games for the team in 42 of its 50 seasons.

Protect your information assets with effective risk management

In today’s information economy, the development, exploitation and protection of information and associated assets are key to the long-term competitiveness and survival of corporations and entire economies. The protection of information and associated assets – information security – is therefore overtaking physical asset protection as a fundamental corporate governance responsibility. 

Information security management system requirements

ISO 27000, which provides an overview for the family of international standards for information security, states that “An organisation needs to undertake the following steps in establishing, monitoring, maintaining and improving its ISMS […] assess information security risks and treat information security risks”. The requirements for an ISMS are specified in ISO 27001. Under this standard, a risk assessment must be carried out to inform the selection of security controls, making risk assessment the core competence of information security management and a critical corporate discipline.

Plan and carry out a risk assessment to protect your information

Information Security Risk Management for ISO 27001 / ISO 27002:

Ideal for risk managers, information security managers, lead implementers, compliance managers and consultants, as well as providing useful background material for auditors, this book will enable readers to develop an ISO 27001-compliant risk assessment framework for their organisation and deliver real, bottom-line business benefits.

Buy your copy today!

About the authors

Alan Calder is the Group CEO of GRC International Group plc, the AIM-listed company that owns IT Governance Ltd. Alan is an acknowledged international cyber security guru and a leading author on information security and IT governance issues. He has been involved in the development of a wide range of information security management training courses that have been accredited by IBITGQ (International Board for IT Governance Qualifications). Alan has consulted for clients in the UK and abroad, and is a regular media commentator and speaker. 

Steve Watkins is an executive director at GRC International Group plc. He is a contracted technical assessor for UKAS – advising on its assessments of certification bodies offering ISMS/ISO 27001 and ITSMS/ISO 20000-1 accredited certification. He is a member of ISO/IEC JTC 1/SC 27, the international technical committee responsible for information security, cyber security and privacy standards, and chairs the UK National Standards Body’s technical committee IST/33 (information security, cyber security and privacy protection) that mirrors it. Steve was an active member of IST/33/-/6, which developed BS 7799-3. 

An ideal primer for anyone implementing a PIMS based on ISO/IEC 27701

ISO/IEC 27701:2019 is a privacy extension to the international information security management standard, ISO/IEC 27001. It has been designed to integrate with ISO 27001 to extend an existing ISMS (information security management system) with additional requirements, enabling an organisation to establish, implement, maintain and continually improve its PIMS.

ISO 27701 provides guidance on the protection of privacy, including how organisations should manage personal information, and helps demonstrate compliance with privacy regulations around the world, such as the GDPR (General Data Protection Regulation).

ISO/IEC 27701:2019: An introduction to privacy information management offers a concise introduction to the Standard, aiding those organisations looking to improve their privacy information management regime, particularly where ISO/IEC 27701:2019 is involved. It is intended for:

It will enable you to understand the basics of privacy information management, including:

This guide will prove useful throughout a number of stages in any privacy information management project – buy your copy today!

An ideal primer for anyone implementing a PIMS based on ISO/IEC 27701

ISO/IEC 27701:2019 is a privacy extension to the international information security management standard, ISO/IEC 27001. It has been designed to integrate with ISO 27001 to extend an existing ISMS (information security management system) with additional requirements, enabling an organisation to establish, implement, maintain and continually improve its PIMS.

ISO 27701 provides guidance on the protection of privacy, including how organisations should manage personal information, and helps demonstrate compliance with privacy regulations around the world, such as the GDPR (General Data Protection Regulation).

ISO/IEC 27701:2019: An introduction to privacy information management offers a concise introduction to the Standard, aiding those organisations looking to improve their privacy information management regime, particularly where ISO/IEC 27701:2019 is involved. It is intended for:

It will enable you to understand the basics of privacy information management, including:

This guide will prove useful throughout a number of stages in any privacy information management project – buy your copy today!

Written by an acknowledged expert on the ISO/IEC 27001 Standard, ISO 27001:2022 – An Introduction to information security and the ISMS standard is an ideal primer for anyone implementing an information security management system aligned to ISO 27001:2022.

The guide is a must-have resource giving a clear, concise and easy-to-read introduction to information security, providing guidance to ensure the management systems you put in place are effective, reliable and auditable.

This pocket guide will help you to:

Using this guide will enable the key employees in your organisation to make better decisions before embarking on an information security project.

This guide will give the non-specialists on the project board and in the project team a clearer understanding of what an information security management system involves, reflecting the ISO 27001:2022 version of the Standard.

Ensure that your staff know what is at stake with regard to information security and understand what is expected of them with this pocket guide.

Use this guide to begin your ISO 27001:2022 implementation journey and let your customers know that the information you hold about them is managed and protected appropriately.

Get up to speed with the ISO 27001:2022 updates and keep your information secure

About the author:

Steve is a Director of Kinsnall Consulting Ltd, providing board-level advice on cyber security and related standards.

Steve is an active member of SC 27, the international committee responsible for cyber security, information security and privacy protection standards, including the ISO 27001 family. He Chairs the UK national committee (IST 33) that mirrors SC 27 and is the Chair of the UK ISO/IEC 27001 User Group.

He is also a contracted ISMS and ITSMS Technical Assessor for UKAS, supporting the assessment of certification bodies offering accredited certification to ISO/IEC 27001 and ISO/IEC 20000-1.

TOC:

Introduction

Chapter 1: Information security – What’s that?

Chapter 2: It’s not IT

Chapter 3: ISO 27001 and the management system requirements

Chapter 4: Legal, regulatory and contractual requirements and business risk

Chapter 5: Information security controls

Chapter 6: Certification

Chapter 7: Signposting

Further reading

Written by an acknowledged expert on the ISO/IEC 27001 Standard, ISO 27001:2022 – An Introduction to information security and the ISMS standard is an ideal primer for anyone implementing an information security management system aligned to ISO 27001:2022.

The guide is a must-have resource giving a clear, concise and easy-to-read introduction to information security, providing guidance to ensure the management systems you put in place are effective, reliable and auditable.

This pocket guide will help you to:

Using this guide will enable the key employees in your organisation to make better decisions before embarking on an information security project.

This guide will give the non-specialists on the project board and in the project team a clearer understanding of what an information security management system involves, reflecting the ISO 27001:2022 version of the Standard.

Ensure that your staff know what is at stake with regard to information security and understand what is expected of them with this pocket guide.

Use this guide to begin your ISO 27001:2022 implementation journey and let your customers know that the information you hold about them is managed and protected appropriately.

Get up to speed with the ISO 27001:2022 updates and keep your information secure

About the author:

Steve is a Director of Kinsnall Consulting Ltd, providing board-level advice on cyber security and related standards.

Steve is an active member of SC 27, the international committee responsible for cyber security, information security and privacy protection standards, including the ISO 27001 family. He Chairs the UK national committee (IST 33) that mirrors SC 27 and is the Chair of the UK ISO/IEC 27001 User Group.

He is also a contracted ISMS and ITSMS Technical Assessor for UKAS, supporting the assessment of certification bodies offering accredited certification to ISO/IEC 27001 and ISO/IEC 20000-1.

TOC:

Introduction

Chapter 1: Information security – What’s that?

Chapter 2: It’s not IT

Chapter 3: ISO 27001 and the management system requirements

Chapter 4: Legal, regulatory and contractual requirements and business risk

Chapter 5: Information security controls

Chapter 6: Certification

Chapter 7: Signposting

Further reading