ABOUT THE AUTHORS

Alan Calder is a leading author on IT governance and information security issues. He is the chief executive of IT Governance Ltd, the one-stop shop for books, tools, training and consultancy on governance, risk management and compliance.

Alan is an international authority on information security management and on ISO 27001 (formerly BS 7799), the international security Standard, about which he wrote, with colleague Steve Watkins, the definitive compliance guide, IT Governance - An International Guide to Data Security and ISO27001/ISO27002. This work is based on his experience of leading the world’s first successful implementation of BS 7799 and is the basis for the UK Open University’s postgraduate course on information security. The sixth edition was published in 2015.

Other books written by Alan include The Case for ISO27001:2013 and Nine Steps to Success: An ISO27001:2013 Implementation Overview, third edition, as well as several pocket guides.

Alan is a frequent media commentator on information security and IT governance issues, and has contributed articles and expert comment to a wide range of trade, national and online news outlets.

Geraint Williams is a knowledgeable and experienced senior information security consultant and PCI QSA, with a strong technical background and experience of the PCI DSS and security testing.

Geraint has provided consultancy on implementing the PCI DSS and has conducted audits with a wide range of merchants and service providers as well as performing penetration testing and vulnerability assessments for various clients. Geraint leads the IT Governance CISSP Accelerated Training Programme along with the PCI Foundation and Implementer training courses. He has broad technical knowledge of security and IT infrastructure, including high-performance computing and Cloud computing. His certifications include CISSP, PCI QSA, CREST Registered Tester, CEH & CHFI.