Upskilling Training

ISO 27001 Information Security Management System Implementation

ISO 27001 is a globally recognized standard for Information Security Management Systems (ISMS). It provides a systematic approach to managing sensitive company information, ensuring its confidentiality, integrity, and availability. The primary objective of ISO 27001 is to establish a robust framework that helps organizations identify potential security risks, implement appropriate controls, and continually improve their security posture.

The "ISO 27001 – Information Security Management System Implementation" training is a specialized program designed to equip individuals and organizations with the knowledge and skills necessary to implement and maintain an effective Information Security Management System (ISMS) based on the ISO 27001 standard. During this training, participants will gain a comprehensive understanding of the ISO 27001 framework, its requirements, and the best practices for establishing a robust ISMS.

Duration 3 days

Participants will be able to learn

By the end of the "ISO 27001 – Information Security Management System Implementation" training, participants will have the knowledge and confidence to lead or contribute significantly to the implementation of ISO 27001 within their organization. The acquired skills will enable them to establish and maintain robust information security practices, protect sensitive data, and demonstrate their commitment to information security excellence to clients, stakeholders, and regulatory authorities.

Who Should Attend?

  • IT Security Centre Personnel
  • Auditors
  • Cyber Security Experts
  • IT Personnel to be audited under ISO 27001
  • Employees who will be the subject of an ISO 27001 audit

Course Syllabus

Information Security Management System (ISMS) key concepts and principles

ISO 27001 Plan-Act-Check-Do Lifecycle

IT Systems Risk Assessment

ISO 27001 Main Control Fields

  • Security Policy
  • Organization of Information Security
  • Asset Management
  • Human Resources Security
  • Physical and Environmental Security
  • Communications and Operations Management
  • Access Control
  • Information Systems Acquisition, Development and Maintenance
  • Information Security Incident Management
  • Business Continuity Management
  • Compliance

ISO 27001 Compliance Audit

Pre-requisites

  • None