Information Security Management (based on ISO 27xxx)

This course gives participants an in-depth understanding of the information security management systems based on ISO 27xxx and critical infrastructure protection standards based on national and EU laws.

Upon completion of the course participants will be able to: 

• understand the challenges of implementing an information security management system based on ISO 27xxx and critical infrastructure protection standards.
• conduct information security risk assessments.

• Information and information security
• Legal and regulatory requirements
• Protection of information, protection requirements
• Standards for information security
• Integrated management system
• High-level structure of the ISO management system standards
• Similarities and differences between management system standards on the basis of the standards ISO 9001:2015, ISO 27001:2013 and ISO 22301:2012
• Information Security Management based on the 2700x series
• Introduction to Information Security Management System (ISMS)
• Best practice approach to implement an information security management system based on the ISO 2700x series of standards
• Measurability and ISMS indicators based on ISO 27004:2009
• Information Security Risk Management based on the 2700x series
• Requirements for IS risk management according to ISO 27001, ISO 31000, ISO 27005 and other requirements (laws, other standards, etc.)
• Best practice for risk assessment
• Treatment of IS risks
• Detailed explanation of the process using case studies and self-performed risk analysis

Persons in charge of:

• Information Security Management
• Information Security Risk Management
• IT Security
• IT Security Risk Management
• Internal Audits
• Data Privacy and Compliance

Multiple choice test