This course allows participants to learn about best practices for the implementation and management of an Information Security Management System (ISMS) as specified in ISO/IEC 27001:2022.
What is ISO 27001?
ISO 27001 is an internationally recognized set of guidelines that focus on information security and provide a framework for the Information Security Management System (ISMS). Adherence to ISO 27001 standards can help the organisation to protect its data systematically and maintain confidentiality, integrity and availability of information for stakeholders.
Objectives
- Understand the implementation of an information security management system in accordance with ISO/IEC 27001
- Understanding the relationship between an information security management system, including risk management, controls and compliance with the requirements of different stakeholders in the organization
- Knowledge of concepts, approaches, standards, methods and techniques to effectively manage an information security management system
- To acquire the knowledge necessary to contribute to the establishment of an Information Security Management System (IMSS) as specified in ISO/IEC 27001
Content
- and day: Introduction to the Information Security Management System (ISMS) concepts required by ISO/IEC 27001
- Introduction to ISO/IEC 27001 family of standards
- Introduction to Management Systems and Process Approach
- Basic principles of information security
- General requirements: presentation of clauses 4 to 8 of ISO/IEC 27001
- Implementation phases of the ISO/IEC 27001 framework
- Continuous improvement of information security
- Conduct of ISO/IEC 27001 certification audit
- nd day: Implementation of information security checks according to ISO/IEC 27001 and certification examination
- Principles and design of information security controls
- Documentation of an information security control environment
- Monitoring and review of information security controls
- Examples of implementation of information security checks based on best practices ISO 27001
- Certification examination
Certification
Examination « PECB Certified ISO/IEC 27001 Foundation » meets the requirements for the PECB examination and certification program. The examination covers the following areas of competence:
Area 1 Basic principles and concepts of the Information Security Management System
Area 2 : Information security management system
Format of the examination:
– The exam takes place at the end of the course, that is during the last afternoon of the training.
– Duration: 1 hour
– Type of questions: multiple choice questions
– No help
Price: 2 800 000 fcfa
Duration: 2 days
Review
