Program Detail:

Introduction
This two-day course has been designed to provide participants with the necessary skills to design and implement ISMS that meets the certification requirements of ISO 27001. Specifically, it features:

• Courseware that is developed on successful ISMS implementation and certification experiences
• The necessary skills to establishing, implementing, operating, monitoring, reviewing, maintaining and improving an effective Information Security Management System (ISMS) in order to meet the requirements of ISO 27001:2005
• The potential pitfalls to avoid along the implementation roadmap
• Case studies presenting real world scenarios

• Fundamental of Information Security
  • Information Security Defined and Basic Glossaries
  • Understanding Threats and Vulnerabilities
  • Security Management Principles
  • Information Security and Corporate Governance
  
  
• Understanding ISO 27001 Controls
  • Basic control principles
  • Security Policy
  • Organization of Information Security
  • Asset Management
  • Human Resources Security
  • Physical and Environmental Security
  • Communications and Operations Management
  • Access Control
  • Information Systems Acquisition, Development and Maintenance
  • Business Continuity Management
  • Information Security Incident Management
  • Compliance: Legal and Technical
  
  
• Designing and implementing an Information Security Management System
  • Determination of Scope of Information Security Management System
  • Identification and classification of Information Assets
  • Determination of the value of Information Assets
  • Identification & Assessment of Risks
  • Risk Treatment and ISO 27001 Control Selection
  • ISMS Documentation Requirements