During this course, participants will learn, through a number of interactive sessions, the most significant aspects of the ISO27002 standard, its objectives, requirements, value to the organization, and its relation with the ISO27001 standard as well as with other standards. Additionally, participants will learn about the benefits and improvements that may be achieved by organizations that have an ISO27001-certified ISMS.
Course objectives :
- Learn the importance of confidentiality, integrity and availability of information.
- Learn the types of risks, threats and damages, and the available risk strategies and the security measures you can take.
- Get insight in the security policy and organization, inclusive code of conduct, ownership, and roles and responsibilities.
- Be able to react to and manage security incidents.
- Learn the various security measures: physical, technical and organizational.
- Be aware of the most important legislations and regulations.
Introduction to Information Security
- Information
- Information Management
- Reliability Aspects
- Secure Information Systems Design
- Operational Processes and Information
- Information Architecture
Threats and Risks
- Risk Management
- Risk Analysis
- Threats
- Damage
- Strategies
- Guidelines for Implementing Security Measures
Approach and Organization
- Security policy
- Information Security Organization
- Code of Conduct
- Business Assets
- Roles
- Incident Management
Security Measures
- Types of Security Measures
- Risks and Security Measures
- Information Classification
- Physical Security Measures
- Technical Measures
- Organizational Security Measures
Legislation and Regulations
- Compliance
- Importance of Legislation and Regulations
- Information Security Legislation
- Legislative Acts
- Information Security Regulations
- Legislation and Regulations Measures
ISO/IEC 27000 standards
- Introduction
- ISO/IEC 27001
- ISO/IEC 27002
Qualification Scheme
- Qualification Scheme
- EXIN contact information
Exam Description
- Exam format
- EXIN’s exam content
- Tips for answering the exam
Review, Evaluation and Examination
- General review
- Sample exam
- Sample exam review
- Course evaluation
- Course certificate
- Certification exam
Every employee, from administrative workers to the CEO, dealing with valuable information.
There are no formal entry requirements. The course is designed to provide a comprehensive introduction to information security management. Given the close relationship of ISO27002 with ISO27001, we strongly recommend that delegates attend the ISO27001 ISMS Foundation Course prior to taking this course.
