ISO/IEC 27002 Foundation & Implementation ISO 27001

Combien de temps dure la formation ?

16,00 heure(s)

Dans quelle(s) langue(s) la formation est-elle donnée ?

Quand a lieu la prochaine session ?

Qui organise cette formation ?

Fondation créée en 2015 par la Chambre de Commerce et l’Association des Banques et Banquiers Luxembourg (ABBL), la House of Training est un organisme agréé de formation professionnelle continue qui s'engage à contribuer activement à la compétitivité et à l'attractivité du Luxembourg en développant les compétences de ceux qui font vivre son économie.

Le contenu de cette page n'est pas disponible en français

À qui s’adresse la formation ?

Professionals engaged in or responsible for information security management
Individuals seeking to gain knowledge about the main processes of an information security management system and information security controls
Individuals interested to pursue a career in information security

Quels sont les objectifs poursuivis ou les compétences visées ?

Foundation training course provides information on the fundamental concepts of information security, cybersecurity and privacy based on ISO/IEC 27002.

Explain the fundamental concepts of information security, cybersecurity, and privacy based on ISO/IEC 27002
Discuss the relationship between ISO/IEC 27001, ISO/IEC 27002, and other standards and regulatory frameworks.
Interpret the ISO/IEC 27002 organizational, people, physical, and technological controls in the specific context of an organisation.

Quel est le contenu de la formation ?

Day 1:Information Security Management System – ISO 27001/2023 versus ISO 27002/2022 (Information technology - Security techniques - Code of practice for information security controls)

Terminology: Management System, Process, Continuous Improvement, Incident etc.
Presentation of ISO 27001 (Information Security Management System) and ISO 2700
Context of organisation
- Tools for the context analysis
- Internal and external issue
Leadership
- Policy
- Rules and responsibilities
- Values
Plan
- Risk Assessment
- Objectives and Action Plan
Support
- Infrastructure
- Traning and Skills
- Communication
- Documented Information
Operations
- Operational Control
- Interested parties (subcontractors and external parties)
- Risk treatment
Performance
- Monitoring KPI’s
- Regulatory conformity (GDPR and others)
- Internal Audit
- Management Review
Continuous Improvement
- Incidents, nonconformities and corrective actions