Duration
4 days
Introduction
The objective is to provide delegates with the necessary skills to develop an information security framework for their organisation. Attendees will learn how to assess their information assets and protect these assets against threats seeking to exploit potential vulnerabilities. Delegates will furthermore learn how to benchmark their existing security practices against the standard and implement a cost-effective security strategy that is compliant with international best practices.
It is essential that companies develop a suitable model for setting up and managing an effective information security management system (ISMS).The design and implementation of an organisation’s ISMS is strongly influenced by business needs and objectives, resulting security requirements and the size and structure of the organisation. This course will assist companies to adopt the most appropriate ISMS for their own specific requirements
COURSE OBJECITVE
On completion of the course the participants will understand:What is information security?The benefits of information securityHow to implement an information security management system in their company
What you will learn
On completion of the course, you will be able to:
- Define the scope of an ISMS
- Develop an ISMS
- Ask the pertinent questions required for an ISO 27001:2013
- Prepare an effective security improvement plan
- Demonstrate conformance to an auditor
- Achieve the maximum benefit from your ISO 27001 conformance
Who should attend
Personnel responsible for their company’s information and data security, or those interested in seeing how Information Security Management can be implemented
COURSE CONTENT
Introduction to ISO 27001
- Individual introductions and learning objectives.
- Background to IT Governance & need for IT controls
- Background to ISO 27001
- What ISO 27001 means to your organisation
- What is Information Security, whys is it needed?
- How to establish security requirements
- Assessing security risks
- Selecting Information Security controls
- Description of a process approach to the adoption of an (ISMS)
- The application of the Plan, Do, Check, Act (PDCA) to the ISMS process
- Understanding the ISMS concept
Understanding the ISMS
- Understanding the ISMS concept
- How to establish, manage, implement, an ISMS
- How to monitor and review an ISMS
Planning for ISO 27001
- Planning and estimating your programme
- Identifying timescales, resources, key end products
Implementing the ISMS
- ISMS documentation requirements
- ISMS- Management responsibilities
- ISMS training and awareness campaigns
Certification
- Creating a Security Improvement Programme
COURSE DELIVERY TECHNQUES
Using lectures, workshops and case studies, you will gain a thorough understanding of implementing techniques for ISO 27001 Information Management Systems.. Group work allows interaction and feedback from other course participants.
Programme scope, delivery arrangements and suitability are confirmed during enquiry.