Duration
2 days
Course aim
Develop the detail knowledge and understanding of ISO/IEC 27001:2013 requirements Information Security Management System (ISMS).
Course description
Information are being generated, processed, stored and retained by organisations on a frequent basis; and with the advanced of current technology there are risks associated with securing your organisation’s data. BSI has developed a comprehensive two-days course that explores in depth the main requirements of ISO/IEC 27001:2013 and its organizational benefits.
Identify the structure and requirements of an effective ISMS and what this means for you. Gain a thorough understanding of the history and development of ISO/IEC 27001, key terms, definitions and the ISO standardized high level structure. You’ll learn to interpret and apply the key concepts and principles of the standard to existing processes within your organization.
How will I benefit?
This course will help you:
- Identify the key requirements and benefits of ISO/IEC 27001:2013
- Manage quality and drive continual improvement
- Take steps to ensure that quality is at the heart of your organization
- Attract and retain customers by meeting their current and future needs better.
- Understand the best practices and controls contained in ISO/IEC 27001:2013 Annex A
What will I learn?
You will learn about:
- Importance and benefits of an ISO/IEC 27001:2013
- Key requirements, terms and definitions of ISO/IEC 27001:2013
- Structure of ISO/IEC 27001:2013, which incorporates the Annex SL common framework for management system standards
- Main concepts such as risk-based thinking, process approach, Plan-Do-Check-Act, and 7 management principles.
- Information security domains in ISO/IEC 27001:2013 Annex A
Who should attend?
Anyone involved in the planning, implementing, maintaining or supervising of the ISMS.
Prerequisites
There are no formal prerequisites, however it will be useful for delegates to read the standard before attending the course.
Agenda
Day 1
Time
Topic
09.00 am
05.00 pm
Benefits to you, Welcome and Introductions
Course Aims, Objectives and Structure
Information Security Management
Background to ISO/IEC 27001 and ISO/IEC 27002
Clause 4: Context of the Organization
Clause 5: Leadership
Clause 6: Planning
Break
Clause 7: Support
Clause 8: Operation
Clause 9: Performance Evaluation
Clause 10: Improvement
Learning Application
Close of day
Day 2
Time
Topic
09.00 am
05.00 pm
Information Security Policies and Organization of Information Security
Human Resource Security
Asset Management
Access Control
Cryptography
Physical and Environmental Security
Break
Operations Security
Communications Security
System acquisition, development and maintenance
Supplier Security
Information Security Incident Management
Information Security Aspects of Business Continuity
Compliance Management
Close of Day
Programme scope, delivery arrangements and suitability are confirmed during enquiry.