Information security course ISO 27001 requirements and clauses

Overall goal:

• Identify the requirements and provisions of ISO 27001

• Understand the definitions and terminology of information security

• Understand what the context of the organization is

• Understand the architecture of the system documented for ISO 27001

• Learn how to plan, operate and improve the information security system

• Identify risks associated with the security and confidentiality of information

• The ability to manage ISO 27001 implementation projects

• Providing the necessary resources to implement ISO 27001

• Understanding the foundations of information security and confidentiality and the goal of applying ISO 27001

Course topics

• Introduction to the ISO 27001 information security and confidentiality management system

• Explanation and review of the provisions of ISO 27001 from clause 4 to clause 10

• Requirements to define the context of the organization and interested parties

• How to determine the scope of the information security management system and the necessary operations for the system

• Leadership and commitment of senior management towards the information security system

• Analyze and identify risks associated with the information security system

• Determine the resources necessary to build a system that guarantees the confidentiality and protection of information

• Selection and qualification of human resources in accordance with the requirements of ISO 27001

• Planning operational processes to manage the information security and confidentiality system

• Monitor, measure and analyze system operations

• Detection of non-conformities and corrective actions

• Internal audit and management review of the information security system

• Continuous improvement of the information security management system

Target groups

• Those working in the field of information security and confidentiality

• Workers in banks, insurance companies, technology companies, or any companies that deal with information

• Responsible for managing, preserving and retrieving information and data

• Responsible for implementing and working on the information security management system in accordance with ISO 27001

• Those wishing to understand the requirements and provisions of ISO 27001