Duration
5 days
Overview
Be confident that you can efficiently meet stakeholder expectations with a robust Information Security Management System (ISMS). Work with our world-class information security trainers on our Lead Implementer Training Course to ensure your ISMS is ISO 27001 compliant.
By training with us you will gain an internationally recognized qualification that enables you to implement exceptional information security management standards in your organization. In becoming a lead implementer you can also set the highest standard of data protection tailored to your organization.
You will also take away sound knowledge of ISO 27001, the ISMS framework, how best to apply this.
How will I benefit?
- An understanding of effective information security management throughout an organization and therefore protection of your information (through integrity, confidentiality and availability) and those of your interested parties.
- Develop vital processes, policies and procedures that can be put into practice immediately
- Create the framework for your own Information Security Management System (ISMS)
- Gain knowledge to develop your ISMS framework and build awareness and support for information security across your organization
- Be confident that you have the capability to protect your business and meet stakeholder expectations
- Encourage continuous professional development across your organization.
What will I learn?
- Upon completion of this training, delegates will be able to:
- What is information security management (ISM)
- Why ISM is important to an organization
- The benefits of ISM
- The background of ISO/IEC 27001/2
- The key concepts and principles of ISO/IEC 27001:2013
- The terms and definitions used
- The main requirements of ISO/IEC 27001:2013
- Identify a typical framework for implementing ISO/IEC 27001 following the PDCA cycle
- Conduct a base line review of the organizations current position with regard to ISO/IEC 27001
- Interpret the requirements of ISO/IEC 27001 from an implementation perspective in the context of their organization
- Implement key elements of ISO/IEC 27001
- Explain the concepts of leadership, elements of project management, managing organizational change, skill sharing and support/motivation during the implementation
- Complete the Lead Implementer ISO/IEC 27001 Certificate Exam
Who should attend?
- Those who will be involved in advising top management on the introduction of ISO/IEC 27001 into an organization.
- Designed for those with information security responsibility
- Those planning to lead and implement a system, or new to managing a system
- Anyone working within information security, including consultants
Prerequisite
There are no formal pre-requisites to attending this course
Agenda
Day 1
Time
Topic
09.00
17.00
Benefits to you, Welcome and Introductions
Course Aims, Objectives and Structure
Information Security Management
Background to ISO 27001/ISO 27002
Clause 4: Context of the Organization
Clause 5: Leadership
Clause 6: Planning
Clause 7: Support
Clause 8: Operation
Clause 9: Performance Evaluation
Clause 10: Improvement
Learning Application
Day 2
Time
Topic
09.00
17.00
Review of Day 1
What is an ISMS and Terms and Definitions
Implementing a Management System
Requirements and Documentation
Baseline Gap Analysis
Context
Interested Parties
Scope
Leadership
Summary
Day 3
Time
Topic
09.00
17.00
Review of Day 2
Planning Process
Risks and Opportunities
Objectives and Targets
Support
Operation
Monitoring, Measurement, Analysis and Evaluation
Internal Audit and Management Review
Nonconformity, Corrective Action Process and Improvement
Integration
Day 4
Time
Topic
09.00
17:00
Review of Day 3
Leadership and Management
Brainstorming
Eight Disciplines Problem Solving
Ishikawa/ Fishbone
Change Management
Delegation
Support
Motivation
Specimen Exam paper
Course Review
Day 5
Time
Topic
09.00
17:00
Review of Day 4
Final questions/final revision
Evaluation
Introduction/readiness to the exam
Exam
End of Course
Programme scope, delivery arrangements and suitability are confirmed during enquiry.