ISO 27001:2013

11/09/2025

Author: Stuart Barker | ISO 27001 Expert and Thought Leader

ISO 27001:2013 is the 2013 version of the international standard for an Information Security Management System (ISMS). It provides a globally recognised framework for organisations to manage and protect their sensitive information assets systematically. This version was a significant update from its 2005 predecessor, adopting a new high-level structure (Annex SL) to make it easier to integrate with other management system standards like ISO 9001 (Quality) and ISO 14001 (Environment).

While the standard has since been updated to ISO 27001:2022, the 2013 version remains widely used and understood. Organisations that were certified under the 2013 version are currently in a transition period to the 2022 version.

ISO 27001 Context

The standard itself is a set of requirements that organisations must meet to protect the confidentialityintegrity, and availability of their information. It is designed to be applicable to organisations of all types and sizes, and its core principle is a risk-based approach to information security.

About the author

Stuart Barker is an information security practitioner of over 30 years. He holds an MSc in Software and Systems Security and an undergraduate degree in Software Engineering. He is an ISO 27001 expert and thought leader holding both ISO 27001 Lead Implementer and ISO 27001 Lead Auditor qualifications. In 2010 he started his first cyber security consulting business that he sold in 2018. He worked for over a decade for GE, leading a data governance team across Europe and since then has gone on to deliver hundreds of client engagements and audits.

He regularly mentors and trains professionals on information security and runs a successful ISO 27001 YouTube channel where he shows people how they can implement ISO 27001 themselves. He is passionate that knowledge should not be hoarded and brought to market the first of its kind online ISO 27001 store for all the tools and templates people need when they want to do it themselves.

In his personal life he is an active and a hobbyist kickboxer.

His specialisms are ISO 27001 and SOC 2 and his niche is start up and early stage business.