ISO/IEC 27002 Foundation & Implementation ISO 27001

Who is the training for?

Professionals engaged in or responsible for information security management
Individuals seeking to gain knowledge about the main processes of an information security management system and information security controls
Individuals interested to pursue a career in information security

Duration

16,00 hours(s)

Language(s) of service

Next session

Goals

Foundation training course provides information on the fundamental concepts of information security, cybersecurity and privacy based on ISO/IEC 27002.

Explain the fundamental concepts of information security, cybersecurity, and privacy based on ISO/IEC 27002
Discuss the relationship between ISO/IEC 27001, ISO/IEC 27002, and other standards and regulatory frameworks.
Interpret the ISO/IEC 27002 organizational, people, physical, and technological controls in the specific context of an organisation.

Day 1 : Information Security Management System – ISO 27001/2023 versus ISO 27002/2022 (Information technology — Security techniques — Code of practice for information security controls)

Terminology: Management System, Process, Continuous Improvement, Incident etc.
Presentation of ISO 27001 (Information Security Management System) and ISO 2700
Context of organisation
- Tools for the context analysis
- Internal and external issue
Leadership
- Policy
- Rules and responsibilities
- Values
Plan
- Risk Assessment
- Objectives and Action Plan
Support
- Infrastructure
- Traning and Skills
- Communication
- Documented Information
Operations
- Operational Control
- Interested parties (subcontractors and external parties)
- Risk treatment
Performance
- Monitoring KPI’s
- Regulatory conformity (GDPR and others)
- Internal Audit
- Management Review
Continuous Improvement
- Incidents, nonconformities and corrective actions