Duration
2 days
Overview
Course aim Develop the knowledge and skill required to implement an ISO/IEC 27001:2013 Information Security Management System (ISMS).
Course description
Information security is critically important to both you and your interested parties. BSI has developed a comprehensive two-days non-residential course that explores in depth the main requirements of ISO/IEC 27001:2013 and its organizational benefits. Good businesses understand information security; great businesses implement it. An ineffective ISMS can cost you time, money and customers. That’s why it’s important to get it right from the start. Implementing a framework based on ISO/IEC 27001:2013 helps your business consistently deliver and drive continual improvement in your products and services.
Gain the required skills to conduct a base-line review of your organization’s current position and implement the key principles of ISO/IEC 27001:2013. Using a step-by-step approach, you’ll learn how to develop an implementation plan, create necessary documentation, monitor your ISMS and achieve continual quality improvement.
How will I benefit?
This course will help you:
- Identify key benefits to your organization from implementing an effective ISMS
- Develop a plan and determine the resources required for the implementation
- Apply good practice to the implementation using proven tools and techniques
- Implement a system that enables better response to customer requirements and market changes
- Provide products and services that consistently meet customer needs and enhance customer satisfaction.
What will I learn?
You will learn about:
- A typical framework for implementing ISO/IEC 27001:2013 following the PDCA cycle
- Considering key concepts and requirements of ISO/IEC 27001:2013 from an implementation perspective
- Implementing key concepts and requirements of ISO/IEC 27001:2013
- Specific documented information requirements of ISO/IEC 27001:2013
- Using gap analysis to conduct a baseline review of your current system.
Who should attend?
Anyone involved in the planning, implementing, maintaining or supervising of the ISMS
Prerequisites
You should have a good knowledge of ISO/IEC 27001:2013 and the key principles of ISMS. If not, we strongly recommend you attend our ISO/IEC 27001:2013 Requirements course.
Agenda
Day 1
Time
Topic
09.00
17.00
Welcome and Introductions
Course Aims, Objectives and Structure
What is an Information Security Management System
- Benefit Of Information Security
- Terms and Definitions
Implementing a Management System
- Requirements and Documentation
- Baseline Gap Analysis
Context of the Organisation
- Interested Parties
- Scope and Boundaries
Leadership
Summary
Day 2
Time
Topic
09.00
17.00
Day 1 Review
Planning Process
- Risks Based Approach
- Information Security Objectives
Support
- Determine Competence And Awareness Requirement
- Resource Allocation and Communication of Policy
Operation
- Control of the ISMS
Performance evaluation and Continual Improvement
- Monitoring, Measurement, Analysis and Evaluation
- Internal Audit and Management Review
- Nonconformity, Corrective Action Process and Improvement
- Integration
Close course
Programme scope, delivery arrangements and suitability are confirmed during enquiry.