Information Security 27001 Foundation

Introduction

On this course, the students will acquire the fundamental knowledge to establish and operate an Information Security Management System (ISMS) based on the ISO/IEC 27001 standard.The course covers the fundamental concepts related with information security, an overview clause-by-clause of the ISO/IEC 27001 standard with high-level implementation guidance and discussion-based practical examples to implement the requirements of the standard, and best practices for the implementation of the ISO/IEC 27001 Annex A 114 controls, and/or others applicable according with the ISO/IEC 27002 control catalogue guidance.As the students advance through the subjects of course, they will be presented with the main supporting standards of the ISO/IEC 27000 family, this includes, but not only, the guidance for information security controls implementation (ISO/IEC 27002), the guidance for implementation of the standard requirements (ISO/IEC 27003), the guidance for performance evaluation (ISO/IEC 27004), and the guidance for information security risk assessment (ISO/IEC 27005). These standards provide guidance to establish, implement, maintain, and continually improve an ISO/IEC 27001 Information Security Management System.This course also provides an overview of other non-family and Information Security related best practices, legislation, and regulation and, on the last module, it covers an overview of the main concepts, principles, and best practices for auditing an ISMS based on the guidance of ISO 19011.

Metodologia

This course is based on theorical, and practical sessions supported by a real-world adapted case-study. The course includes hands-on practical and theorical exercises to:better prepare the students for the real-world challengesto prepare and increase the likelihood of success on the certification examtrain and prepare professionals for participating in an ISMS implementation program or ISMS audit based on ISO/IEC 27001.This course is available to be delivered in a Classroom and Live-Training model.Live Training brings you the dynamic environment of the classroom, to your desk. Using your computer, you interact with the trainer and the trainees as if you were with them in the classroom.