ISO Information Security Management System Essentials

Course details

Course Overview:

Information and the supporting processes, systems and networks are important assets. Confidentiality, integrity and availability of information may be essential to maintain competitive edge, cash-flow, profitability, legal compliance and commercial image.

Securing the Knowledge assets and Intellectual Capital, which comprise organization’s core competencies accumulated throughout the years of experience, is crucial to the organization’s success and, often, survival.

Information security protects information from a wide range of threats in order to ensure business continuity, minimize business damage and maximize return on investments and business opportunities.

Many information systems have not been designed to be secure. The security that can be achieved through technical means is limited, and should be supported by appropriate management and procedures. Identifying which controls should be in place requires careful planning and attention to detail, which Information Security Management System emphasizes and implements

Who Should Attend?

• Privacy managers, IT managers, Project Managers, Quality Managers.

Course objectives:

To introduce the course participants to the ISO 27001 standard and detailed overview of the requirements.

Participants will focus on the standard, its application, implementation and registration requirements.

Course Outline:

• Understand the structure of an Information Security Management System (ISMS)
• Structure an Information Security Policy
• Plan a risk assessment
• Interpret basic information security controls
• Draw up a Statement of Applicability
• Plan the implementation, operation and the maintenance of an ISMS
• Plan an information security audit
• Understand the process of certification