Duration
3 days
Overview
ISO/IEC 27005:2011 provides guidelines for information security risk management.
It supports the general concepts specified in ISO/IEC 27001 and is designed to assist the satisfactory implementation of information security based on a risk management approach.
Knowledge of the concepts, models, processes and terminologies described in ISO/IEC 27001 and ISO/IEC 27002 is important for a complete understanding of ISO/IEC 27005:2011.
ISO/IEC 27005:2011 is applicable to all types of organizations (e.g. commercial enterprises, government agencies, non-profit organizations) which intend to manage risks that could compromise the organization's information security.
Learning Objectives
- Acquire the knowledge necessary for the implementation, management and maintenance of an ongoing risk management program as per ISO 27005:2011
- To introduce the concepts, approaches, standards, methods and techniques allowing an effective management of IS risk (ISO 27005:2011)
- Understand the relationship between the information security management system including risk management), the security measures and the compliance with the requirements of different stakeholders of an organization (ISO 27005:2011 and ISO 27001:2013)
- Acquire the skills necessary to effectively advise organizations on the best practices in IS Risk Management
- Interpret the requirements of ISO/IEC 27001:2013 on risk management
Course Program
Programme scope, delivery arrangements and suitability are confirmed during enquiry.