Information security threats and attacks grow and improve constantly. As such, organisations are increasingly concerned about how their valuable information is handled and protected. The best form of defense against them is the proper implementation and management of information security controls and best practices. Information security is the globally accepted benchmark and also a key expectation and requirement of customers, legislators, and other interested parties.
This training course is designed to prepare you to implement an information security management system (ISMS) based on the requirements of ISO/IEC 27001. It aims to provide a comprehensive understanding of the best practices of an ISMS and a framework for its continual management and improvement.
Fees
COURSE OUTLINES
- Course objectives and structure
- Standards and regulatory frameworks
- Information Security Management System (ISMS)
- Fundamental information security concepts and principles
- Initiation of the ISMS implementation
- Understanding the organisation and its context
- ISMS scope
- Leadership and project approval
- Organizational structure
- Analysis of the existing system
- Information security policy
- Risk management
- Statement of Applicability
- Documented information management & Selection and design of controls
- Implementation of controls
- Trends and technologies
- Communication
- Competence and awareness
- Security operations management
- Monitoring, measurement, analysis, and evaluation
- Internal audit
- Management review
- Treatment of nonconformities
- Continual improvement
- Preparing for the certification audit
- Certification process and closing of the training course
COURSE DETAILS
- Training material containing over 450 pages of information and practical examples will be distributed
- In case of exam failure, you can retake the exam within 12 months for free
The course is eligible for funding on the Get Qualified Scheme
PREREQUISITES
The main requirement for participating in this training course is having a general knowledge of the ISMS concepts and ISO/IEC 27001.