Espion IT

• Search Courses
• Schedule
• List all Courses
• Training by Track
• Training by Department
• Training by Certification

An Introduction to ISO 27001 - ESP-A-014

• Track: Software, Technical, Management.
• Level: Practitioner level - Those who must incorporate security conscious practices into their daily processes

Overview

This course provides participants with a high level introduction to ISO 27001 which can be used to align an organisation’s information security management system with best practice. This course will show ultimately how ISO 27001 will enable an organisation to better understand and control risks related to the physical and electronic information that they store, process or transmit. The standard puts forward an information management system that is aligned with business objectives and is not solely focused on the IT Department. Information Security cannot solely be managed by the IT Department and roles and responsibilities with regard to information security need to be set and understood across the business. This foundation course is an important first step in moving your organisation towards alignment with ISO 27001.

Outline

- Background
- Structure of the Standard Explained
- Scope
- Conducting a Risk Analysis
- Domains Explained
- Conducting a Gap Analysis
- Continuous Assessment

This course is suitable for

anyone involved in reducing an organisations exposure to information risk.

Course duration

Half Day

Course cost

€375

Course format

Instructor led. All Espion training courses are of small class size (max 8 attendees) to ensure an optimum teaching environment. 

Course dates

Friday 6 November 2009
Ireland - Dublin

.

Course location

Espion Training Centre

Content

Unit 1: Background
a. What is ISO 27001/2?
b. How does the standard compare with others out there?
c. Implement ISO 27001 or ISO 27002?
d. Should one certify or not & how long does it take?
e. Getting started with ISO 27001

Unit 2: Structure of the Standard Explained
a. Clauses
b. Main Security Categories

Unit 3: Scope
a. Scoping your target environment (what to include and exclude)

Unit 4: Conducting a Risk Assessment
a. The goal of the risk management process
b. The benefits of risk management
c. The elements of risk management process

Unit 5: Domains Explained
a. An overview of the 11 domains
b. Types of controls
c. Resources available to help progress quickly – free and commercial

Unit 6: Conducting a Gap Analysis
a. Gap analysis objectives
b. Gap analysis approach
c. Gap analysis reporting

Unit 7: Continuous Assessment
a. Maintaining a continuous improvement cycle - Plan Do Act Check