master class iso 27001 implementation - global...

2

Click here to load reader

Upload: truongnguyet

Post on 11-May-2018

217 views

Category:

Documents


3 download

TRANSCRIPT

Page 1: Master Class ISO 27001 implementation - Global …store.globalknowledge.net/course-overviews/EG/ISO27001MI.pdfMaster Class ISO 27001 implementation ... Information Security Management

ISO27001MI www.globalknowledge.com.eg [email protected] 00 20 (0) 2 2269 1982 or 16142

Master Class ISO 27001 implementation

Duration: 2 Days Course Code: ISO27001MI

Overview:

This five-day intensive course enables the participants to develop the expertise to support an organization in implementing and managing anInformation Security Management System (ISMS) as specified in ISO/IEC 27001:2013. Participants will also master the best practices forimplementing information security controls from the eleven areas of ISO/IEC 27002:2005. This training is consistent with the good practices of project management established by the Project Management Institute (PMI) and ISO10006:2003 (Quality Management Systems - Guidelines for Quality Management in Projects). This training is fully compatible with ISO/IEC27003:2009 (Guidelines for the Implementation of an ISMS), ISO/IEC 27004:2009 (Measurement of Information Security) and ISO/IEC27005:2008 (Risk Management in Information Security)

Target Audience:

Project manager or consultant wanting to prepare for and support an organization in the implementation of an Information SecurityManagement System (ISMS) ISO27001 Auditor who wants to master the Information Security Management System implementationprocessPerson responsible for the information security or conformity in an organizationMember of the information security team Expert advisorin information technologyTechnical expert wanting to prepare for an information security function or for an ISMS project management function

Objectives:

At the end of this course, the participant will gain competencies Acquiring expertise to support an organization in implementing,in: managing and maintaining an ISMS as specified in ISO/IEC

27001:2013Understanding the application of an Information SecurityManagement System in the ISO/IEC 27001:2013 context Acquiring the expertise necessary to manage a team in

implementing the ISO/IEC 27001:2013 standardMastering the concepts, approaches, standards, methods andtechniques allowing effective management of an Information Developing personal skills and knowledge required to adviseSecurity Management System organizations on best practices in management of information

securityUnderstanding the relationship between an Information SecurityManagement System, including risk management and controls Improving the capacity for analysis and decision making in a contextand compliance with the requirements of different stakeholders of of information security managementthe organization

Prerequisites:

ISO 27001 Foundation Certification or a basic knowledge of ISO27001 is recommendedParticipants are required to purchase a copy of the ISO/IEC27001:2013 Upon passing the Lead Implementer Exam, the candidate can getregistered with PECB to become:A Provisional Implementer – Required: No experience requiredAn Implementer – Required: 2 years of professional experience, 1year of information security experience, ISMS project activitiestotalling 200 hoursA Lead Implementer - Required: 5 years of professionalexperience, 2 years of information security experience, ISMSproject activities totalling 300 hours

Page 2: Master Class ISO 27001 implementation - Global …store.globalknowledge.net/course-overviews/EG/ISO27001MI.pdfMaster Class ISO 27001 implementation ... Information Security Management

ISO27001MI www.globalknowledge.com.eg [email protected] 00 20 (0) 2 2269 1982 or 16142

Content:

Risk management: identification, analysis andtreatment of risk (drawing on guidance from line

ISO 27005)Drafting the Statement of ApplicabilityDay 3: Implementing an ISMS based on ISO27001Implementation of a document managementframeworkDesign of controls and writing proceduresImplementation of controlsDevelopment of a training ; awarenessprogram and communicating about theinformation securityIncident management (based on guidancefrom ISO 27035)Operations management of an ISMSDay 4: Controlling, monitoring, measuringand improving an ISMS; certification audit ofthe ISMSControlling and Monitoring the ISMSDevelopment of metrics, performanceindicators and dashboards in accordancewith ISO 27004ISO 27001 internal AuditManagement review of an ISMSImplementation of a continual improvementprogramPreparing for an ISO 27001 certificationauditDay 5: Certification Exam

Further Information:

For More information, or to book your course, please call us on 00 20 (0) 2 2269 1982 or 16142

[email protected]

www.globalknowledge.com.eg

Global Knowledge, 16 Moustafa Refaat St. Block 1137, Sheraton Buildings, Heliopolis, Cairo