ISO 27001 Foundation

----- Guaranteed Date -----

This 2 days course enables participants to learn about the best practices for implementing and managing an Information Security Management System (ISMS) as specified in ISO/IEC 27001:2013, as well as the best practices for implementing the information security controls of the fourteen domains.
This training also helps to understand how ISO 27001 and ISO 27002 relate with ISO 27003 (Guidelines for the implementation of an ISMS), ISO 27004 (Measurement of information security) and ISO 27005 (Risk Management in Information Security).

TRAINING METHODOLOGY

ISO 27001 Foundation training course is based on both theory and practice sessions with:

• Lectures illustrated with examples based on real cases.
• Review exercises to assist the exam preparation. To benefit from the practical exercises, the number of training participants is limited.
• Practice test similar to the certification exam.

To benefit from the practical exercises, the number of training participants is limited.

AUDIENCE

• Members of an information security team
• IT Professionals wanting to gain a comprehensive knowledge of the main processes of an Information Security Management System (ISMS)
• Staff involved in the implementation of the ISO 27001 standard
• Technicians involved in operations related to an ISMS
• Auditors
• CxO and Senior Managers responsible for the IT governance of an enterprise and the management of its risks

INCLUDED:

• Training in English language.
• Course manual in English, containing over 200 pages of information and practical examples.
• Behaviour Participation Certificate with 14 CPD/CPE credits.
• Certification Exam.
• Certification Diploma after successful examination and formal process registration. This process has no associated cost.
• Coffee break in the morning and afternoon.

NOT INCLUDED:

• Lunch.

PROGRAM

Introduction to Information Security Management System (ISMS) concepts as required by ISO 27001

• Introduction to the ISO 27000 family of standards
• Introduction to management systems and the process approach
• Fundamental principles information security
• General requirements: presentation of the clauses 4 to 8 of ISO 27001
• Implementation phases of ISO 27001 framework
• Continual improvement of Information Security
• Conducting an ISO 27001 certification audit

Implementing controls in information security according to ISO 27002

• Principles and design of information security controls
• Documentation of an information security control environment
• Monitoring and reviewing the information security controls
• Examples of implementation of information security controls based on ISO 27002 best practices

ISO 27001 Foundation Certification Exam

LEARNING OBJECTIVES

• understand the implementation of an Information Security Management System in accordance with ISO 27001
• understand the relationship between an Information Security Management System, including risk management, controls and compliance with the requirements of different stakeholders of the organization
• know the concepts, approaches, standards, methods and techniques allowing to effectively manage an Information Security Management System
• acquire the necessary Knowledge to contribute in implementing an Information Security Management System (ISMS) as specified in ISO 27001
• To understand the relationship between the ISO 27001 and other management standards such as ISO 9000 and ISO 20000