Information Security
ISO/IEC 27001 Lead Implementer
Course Overview
ISO/IEC 27001:2022 international standard specifies the requirements for establishing,
Implementing, maintaining and continually improving an information security management
System within the context of the organization. It also includes requirements for the assessment
And treatment of information security risks tailored to the needs of the organization.
Information being a valuable asset and a building block is the key to the growth of any
Organization. Information needs to be suitably protected like any other important business asset.
In the modern world this asset becomes crucial for success and maintaining credibility of the
Organization. If this asset is compromised then the organization may have to face various threats
And risks like brand image erosion, business disruption, financial and productivity loss etc. On the other side, information security also maximize return on investments, minimize business risks and increase business opportunities.
Our training courses are structured to provide an understanding of ISO/IEC 27001:2022 requirements blended with case studies, exercises and role plays where a participant will be equipped with the knowledge and skills which are needed to implement the
Information Security Management System (ISMS) of an organization.
What you will learn:
- Enhancement of skills and knowledge.
- Will be enabled to provide valuable insights to the management with regards to ISMS implementation.
- Will be enabled to add value as an implementer by implementing effective controls that will help preventing or mitigating risks and subsequently improving the overall ISMS.
- Enables you to improve your career prospects worldwide.
Who should attend?
- Professionals who are interested in implementing an effective information security management system framework within an organization.
- Personnel who want to pursue a career as an implementer in information security management system.
- Project managers or consultants responsible for establishing, implementing, maintaining, auditing and improving Information Security Management Systems within an organization.
- Top Management (IT Head, CISO etc.) and Senior Managers responsible for the IT governance of an enterprise and the management of its risks
Course Outline:
Topics to be covered in this course include:
- Understanding the purpose of an Information Security Management System by establish the context of the organization and the processes involved in establishing, implementing, maintaining and continually improving an ISMS.
- Understanding the mandatory documents and records required by the international standard.
- Formulation of ISMS Scope and Statement of Applicability (SoA).
- Assist top management in formulating the Information Security Policy and Information Security Objectives that are aligned with the strategic direction of the organization.
- Establishing Risk Assessment and Risk Treatment methodology based on the context of the organization and implementing the same.
- Assist in establishing the internal audit program and management reviews within an organization.
- Understanding controls listed in Annex A of the standard and knowledge of implementing correct type of controls to mitigate risks.
Pre-requisite
Knowledge on ISMS would be an added advantage.