Duration
INFORMATION SECURITY MANAGEMENT SYSTEM
2 days
Module 1: Introduction INFORMATION SECURITY MANAGEMENT
- Overview of data security concepts, principles, and objectives
- Introduction to ISMS and ISO/IEC 27001/27002 standards
- Importance and benefits of information security policies
- Defining roles and responsibilities in ISMS
Module 2: INFROMATION RISK AND MANAGEMENT RESPONSIBILITIES
- Risk management principles and methodologies.
- Understanding risk and establishing security strategy
- Engaging with authorities and special interest groups, threat intelligence for proactive security
- Segregation of duties, principle of least privilege and need-to-know basis.
Module 3: UNDERSTANDING Information Security Control CATEGORIES
- Introduction to information security controls and annex
- Overview of operational controls in information security
- Importance of operational controls for information protection
- People control and access management process, policies, and procedures.
Module 4: PHYSICAL SECURITY & TECHNOLOGICAL CONTROLS
- Understanding physical security importance in securing information
- Physical security perimeters and environmental threat
- Role of technological controls in information security
- Security tools and technologies
Module 5: Managing Information Assets
- Identification of information asset and asset management life cycle.
- Understanding information classification and labelling
- Establishing acceptable use policies for assets
- Managing asset return and disposal.
Module 6: IDENTITY MANAGEMENT AND ACCESS CONTROL
- Identity management and authentication
- Access controls and rights management
- Access control best practices
- Ensuring security in supplier relationships
Module 7: Ensuring security in OPErATIONS
- Overview of operational security in isms
- Understanding operational risks and managing security risk
- Implementation of operational controls
- Technical vulnerability management
Module 8: SECUIRTY INCIDENT RESPONSE AND MANAGEMENT
- Incident detection and reporting procedures.
- Incident escalation and response protocols
- Post-incident analysis and remediation
- Learning from security incidents and continual improvement
Module 9: SECURITY AWARENESS and Training
- Importance of security awareness in organizations
- Training employees on security best practices
- Conducting regular security awareness programs
- Measuring the effectiveness of training
Module 10: SECURITY ASSESSMENT, AUDIT and CONTINUAL IMPROVEMENT
- Implementing security monitoring tools and techniques
- Establishing criteria of effectiveness measurement
- Understanding security audits and ISO27001 certification audits.
- Security maturity models, assessments models and continuous improvements.
ACTIVITIES
- Group discussions and workshops on applying information security principles.
- Project: Developing an information security management system framework and security assessment model
Programme scope, delivery arrangements and suitability are confirmed during enquiry.