Duration
1 day
Course Description
This one-day course will highlight the importance of information security and the overall structure of ISO/IEC 27001:2013 standard. It review and interpret the ISO/IEC 27001requirements for effective ISMS implementation.
Course objectives
On successful completion of this course the attendees will be able to learn:
- What is information security and ISMS?
- Understand the ISO/IEC 27001:2013 requirements for ISMS
- Interpret the ISO 27001 requirements to the needs of your organization
- Identify and assess ISMS risks
Who Should Attend
This course is recommended for
- Chief Information Officers
- Information Security Manager
- IT managers responsible for delivering or running critical business information systems
- Business System Managers
- Information Security Officers
- Information Technology Professionals
- Information Security Auditors
- Head of Security Departments and Security Personnel
Course Content
- Introduction to information, information risk, ISMS, cybersecurity
- Basics concept of information security management
- Understand the 3 main pillars of information security (CIA triad)
- Interpretation of ISO/IEC 27001 requirements
- Context of the organization
- Introduction to company's context
- Understanding the organization, its context and interested parties
- Leadership
- Leadership and commitment
- Information Security Policy
- Organizational roles, responsibilities and authorities
- Planning
- Actions to address risks and opportunities
- Information security objectives and planning to achieve them
- Support
- Resources
- Competence
- Awareness
- Communication
- Documented information
- Operation
- Operational planning and control
- Information security risk assessment & treatment
- Performance evaluation (Monitoring and Evaluation)
- Monitoring, measurement, analysis and evaluation
- Internal audit
- Management review
- Improvement
- Nonconformity & corrective action
- Continual improvement
- Developing Implementation plan
Programme scope, delivery arrangements and suitability are confirmed during enquiry.