Duration
ISO/IEC 27001:2022 Information Security Management Systems (ISMS) Transition Training
2 days
Overview
Data theft, cybercrime and liability for privacy leaks are risks that all organizations need to factor in. Any business needs to think strategically about its information security needs, and how they relate to its own objectives, processes, size and structure. The ISO/IEC 27001:2022 standard enables organizations to establish an information security management system and apply a risk management process that is adapted to their size and needs, and scale it as necessary as these factors evolve.
Why is ISO/IEC 27001 important?
With cyber-crime on the rise and new threats constantly emerging, it can seem difficult or even impossible to manage cyber-risks. ISO/IEC 27001 helps organizations become risk-aware and proactively identify and address weaknesses.
ISO/IEC 27001 promotes a holistic approach to information security: vetting people, policies and technology. An information security management system implemented according to this standard is a tool for risk management, cyber-resilience and operational excellence.
Benefits to Organizations
Implementing the information security framework specified in the ISO/IEC 27001 standard helps you:
- Reduce your vulnerability to the growing threat of cyber-attacks
- Respond to evolving security risks
- Ensure that assets such as financial statements, intellectual property, employee data and information entrusted by third parties remain undamaged, confidential, and available as needed
- Provide a centrally managed framework that secures all information in one place
- Prepare people, processes and technology throughout your organization to face technology-based risks and other threats
- Secure information in all forms, including paper-based, cloud-based and digital data
- Save money by increasing efficiency and reducing expenses for ineffective defence technology
Objectives
On training completion, participnatss will be able to:
- Understand changes of ISO 27001:2022 vs ISO/IEC 27001:2013
- Understand the reasons for the change
- Identify the principle changes
- How to manage the ISO 27001 transition process;
- The changes to the Clauses and Controls in ISO 27001:2022;
- How the changes affect the implementation and audit of the standard;
- The structure and controls in ISO 27002:2022 and:
- The ISO 27005:2022 standard and its relationship with ISO 27001.
Who should attend?
This course is recommend the course to those who are responsible for implementing and/or conducting intern audits of ISMS within their organization that may include Information Security Manager/Executive, Information Security Auditors, Data center manager/engineers, Project Managers
Course Content
- 1. Introduction to ISO/IEC 27001:2022
- Overview of ISO/IEC 27001 family
- Information Security vs Cyber Security
- Benefits in implementing ISO/IEC 27001
- Overview of ISO/IEC 27001:2022
- 2. Changes in Management System
- Context of the organization
- Leadership
- Planning
- Support
- Operation
- Performance evaluation
- Improvement
Annex A Changes
- Overview of the Annex A changes
- Control Categories
- Information Security Attributes
- Changes in ISO/IEC 27021:2022 Annex A Control structure
- Brief review of controls
- Introduction to new controls
How to transit from ISO/IEC 27001:2013 to ISO/IEC 27001:2022
Programme scope, delivery arrangements and suitability are confirmed during enquiry.