Duration
1 day
Introduction
Information is a valuable business asset and the key to the success and growth of any company. Hence it is essential that this business asset is suitably protected. In the modern networked world this becomes crucial for success and maintaining credibility. Information security is the protection of information from a wide range of threats in order to ensure business continuity, minimize business risk, maximize return on investments and increase business opportunities.
Course Overview:
This one-day course will highlight the importance of information security; the overall structure of ISO/IEC 27001:2013 and a detailed review of the requirements as well as the road map towards an effective ISMS implementation.
This interactive training provides an introduction to the ISO/IEC 27001:2013 international standard for information security. ISO 27001 is designed to ensure the selection of adequate and proportionate security controls that protect information assets and give confidence both to the organization and to other interested parties. It applies to all types of organizations including commercial enterprises, government agencies, and not-for-profit organizations in the manufacturing, service and software sectors.
Course objectives
The objective of this training is to introduce participants to the purpose and requirements of ISO 27001:2013 Information Security Management Systems (ISMS) as a tool for business improvement.
- What is information security?
- Understand the ISO/IEC 27001:2013 requirements and differences with ISO/IEC 27001:2005 old standard
- How to evaluate their organisation’s risk to C.I.A.
Training Style
This course is designed and delivered based on the competency-based training concepts, which includes lectures, group discussion, and workshops.
Who Should Attend?
This course is recommended for
- Information Security Manager
- IT managers responsible for delivering or running critical business information systems
- Chief Information Officers or delegates
- Business System Managers
- Information Security Officers
- Information Technology Professionals
- Information Security Auditors
- Head of Security Departments and Security Personnel
Course Content
Background
Fundamentals of ISO 27001:2013
- Process Approach
- Process-base ISMS Model
- Clause Structure
- P-D-C-A in ISO 27001
- Identifying the risks associated with the confidentiality, integrity and availability
ISO 27001:2013 Requirements
- Scope
- Normative references
- Terms and definitions
- Information security management system
General requirements
- Establishing and managing the ISMS
- Establish the ISMS
- Implement and operate the ISMS
- Monitor and review the ISMS
- Maintain and improve the ISMS
- Documentation requirements
- General
- Control of documents
- Control of records
- Management responsibility
Management commitment
- Resource management
- Provision of resources
- Training, awareness and competence
- Internal ISMS audits
- Management review of the ISMS
- Review input
- Review output
- ISMS improvement - Continual improvement
- Corrective action
Annex A (normative) Control objectives and controls
Discussion Q & A
Programme scope, delivery arrangements and suitability are confirmed during enquiry.