ISO/IEC 27001 Foundation

Course details

About ISO 27001
-----------------------
ISO/IEC 27001:2013 is an international standard that provides the basis for effective management of confidential and sensitive information, and for the application of information security controls. It enables organizations to demonstrate excellence and prove best practice in Information Security management. Conformance with the standard requires commitment to continually improve control of confidential and sensitive information, providing reassurance to sponsors, shareholders and customers alike.

About ISO 27001 Foundation
---------------------------------------
This course enables participants to learn about the best practices for implementing and managing an Information Security Management System (ISMS) as specified in ISO/IEC 27001:2013, as well as the best practices for implementing the information security controls of the eleven domains of the ISO 27002. This training also helps to understand how ISO/IEC 27001 and ISO 27002 relate with ISO 27003 (Guidelines for the implementation of an ISMS), ISO 27004 (Measurement of information security) and ISO 27005 (Risk Management in Information Security).

Who should attend?
--------------------------
 Members of an information security team
 IT Professionals wanting to gain a comprehensive knowledge of the main processes of an Information Security Management System (ISMS)
 Staff involved in the implementation of the ISO/IEC 27001 standard
 Technicians involved in operations related to an ISMS
 Auditors
 CxO and Senior Managers responsible for the IT governance of an enterprise and the management of its risks

Learning objectives
---------------------------
 To understand the implementation of an Information Security Management System in accordance with ISO/IEC 27001
 To understand the relationship between an Information Security Management System, including risk management, controls and compliance with the requirements of different stakeholders of the organization
 To know the concepts, approaches, standards, methods and techniques allowing to effectively manage an Information Security Management System
 To acquire the necessary Knowledge to contribute in implementing an Information Security Management System (ISMS) as specified in ISO/IEC 27001 Updated on 04 May, 2017