Duration

Information Security Management System (ISMS): Implementing ISO/IEC 27001:2022

2 days

Overview

Improve and protect your organization, share knowledge of information security and build stakeholder confidence with our ISO/IEC 27001 Implementation training course – and gain the expertise to put in place a robust and quality Information Security Management System (ISMS).

We deliver a globally-recognized certification that gives you the skills framework to manage your organization’s data and maintain best practice in information security management. This will incorporate each stage from scoping your policy needs to evaluating risks and building organization awareness, and on completion of this training course you can play a key role in ensuring your organization is ISO/IEC 27001 compliant.

Course aim

To gain an understanding of effective information security management, by using a systematic framework to protect the confidentiality, integrity and availability of your information and that of your interested parties.

How will I benefit?

You will develop an understanding of how ISO/IEC 27001 can provide a systematic framework to improve overall organizational performance when managing information.

Upon completion of the course, you will appreciate how consistent and predictable results can be more effectively and efficiently delivered by the promotion/application of the process approach, within ISO/IEC 27001, and how this help in meeting requirements.

Risk-based thinking has been included in the requirements of ISO/IEC 27001, and you will benefit from an understanding of this approach; especially when defining the rigor and degree of formality needed to plan and control an Information Security Management System.

You will also be able to recognize the new harmonized approach, developed by ISO, to improve alignment among its International Standards for management systems.

What will I learn?

Upon completion of this training, you will be able to:

Explain key elements of a management system implementation process
Identify a typical framework for implementing ISO/IEC 27001 following the PDCA cycle
Conduct a base line review of the organizations current position with regard to ISO/IEC 27001
Interpret the requirements of ISO/IEC 27001 from an implementation perspective in the context of their organization
Implement key elements of ISO/IEC 27001

Who should attend?

Those who will be involved in advising top management on the introduction of ISO/IEC 27001 into an organization
Designed for those with information security responsibility
Those planning to implement a system or new to managing a system
Anyone working with information security, including consultants

Prerequisites

There are no formal prerequisites for this course.

Day 1

Time

Topic

09.00

Lunch 17.00

Welcome and Introductions

Course Aims, Objectives and Structure

Module 2: Implementing Clause 4 and 5

Summary

Day 2