Introduction to: ISO 27001 & ISO 27002:2005 Information Security Management Systems Training Course

Course Description

Information security is critically important to both you and your customers. BSI has developed a comprehensive one-day non-residential information security training course that explores in depth all of the business implications of the International Standard for Information Security Management (ISO27001:2005).  The delegates will learn about:

• Information security
• The purpose of the standard 
• Management of objectives and controls 
• The importance of the most significant controls 
• The implications of implementing ISO 27001:2005 into an organisation 
• The implications of certification and commercial pressures 
• Penalties for non-compliance

Who Should Attend?

• Senior managers 
• IT managers
• Systems managers
• IT security officers

Auditors who will be involved in introducing ISO 27001:2005 into an organisation.

Benefits to Your Business

• Effective information security management throughout the organisation
• Foolproof protection of your interests and those of your customers

Course Structure

• Introduction to Information Security: the basics, myths and reality
• Business needs: commercial and legal implications
• Introduction to ISMS standards: history, development, current situation
• Certification: the process, maintenance
• Accreditation: current developments, options
• Designing and implementing a management system: 
  - Policy 
  - Scope 
  - Risk Assessment 
  - Risk Management 
  - Statement of Applicability
  - Critical Success Factors
  - Open Forum

Further Information

Fee: One-day information security training course including refreshments, lunch and information security training course notes - £425+ VAT.
Attendance on this information security training course will provide delegates with 8 CPD points.