OVERVIEW
The ISO 27001:2005 Executive Overview course provides a firm understanding of the requirements of the ISO 27001:2005 standard. Case studies, open discussions and role-playing audit scenarios helps develop a hands-on understanding that will facilitate the implementation of a good information security management system.
TARGET AUDIENCE
This course is intended for employees or individuals responsible for designing, implementing, managing, and maintaining an Information Security Management System within an organization or those who want to get a better knowledge of the ISO 27001 standard, including:
- Information Systems or MIS Directors or Managers
- Compliance Officers or Managers
- IT Professionals and Network Engineers
- Information Security Officers, Managers, ISM or ISMS Managers
- ISO coordinators or Management Representatives
LEARNING OBJECTIVES
- Understand information security definitions and terminology
- Learn the background and objectives of ISO 27001:2005
- Understand the requirements of the ISO 27001:2005 standard
- Understand risk assessment and the controls of Annex A
DURATION AND CLASS HOURS
The duration of this ISO 27001 Executive Overview course is one and a half days, with times allocated as follows:
- Day 1: 8:30 AM - 5:30 PM
- Day 2: 8:30 AM - 12:00 PM
After this course is over, the ISMS Internal Auditor course starts. Those students who signed up for the ISMS Internal Auditor course will be provided with lunch and will resume classes at 1 PM.
PREREQUISITE
The ISO 27001 Executive Overview course is designed for individuals with little knowledge of ISO 27001 or information security management systems.
COURSE MATERIALS
Students receive comprehensive course manuals with reference materials, including:
- Presentation slides
- Case studies
- Workshop exercises
- Forms used throughout the course
LANGUAGES
The full course, including all the workshops, can be taught in English or Spanish.
SUMMARY AGENDA
The topics in this course include:
- Introduction
- Information Security, Risk Assessment and Asset concepts and definitions
- Structure of ISO 27001:2005 Standard
- The ISO 27001:2005 Standard - Clause 4 through 8
- Control Objectives and Controls of Annex A
- The Risk Assessment Process Lifecycle o Employees, Contractor, Vendor and Customer Security
- Physical Security o Network, IT Systems, Web and Mobile Security
- Information Security Incident Handling
- Business Continuity and Disaster Recovery
- Eight (8) Workshops
PRICING
Total price for this course is $ 650.
Print PDF Version
Register