This intensive, challenging and highly interactive training program is for those participants seeking an in-depth understanding of the ISO 27001:2005 and associated standards, and the range of auditing techniques and protocols associated with an auditor role.
The course offer awareness training on Information Security Management System (ISMS) in accordance to International Standards, i.e. ISO 27001:2005 to enhance the knowledge uniformity across the Telecom organization and to achieve effective utilization of implemented systems.
The course aims to help you to build and maintain comprehensive Management Services. Though our clients already have policies for best practices in place there might be differences with the Standards and a need to plug these gaps which requires trained competencies. This training aims to ensure that our clients ISMS honor expectations and that it successfully passes surveillance and audits.
Students learning experience includes numerous practical exercises with feedback, case studies and participant action plans.
ISO/IEC 27001:2005 - Information technology -- Security techniques -- Information security management systems – Requirements, commonly called ISO 27001 is an information security management standard. It provides a systematic approach to managing sensitive company information so that it remains secure. It encompasses people, processes and IT systems. Previously known as BS 7799-2:2002, the standard is now officially called ISO/IEC 27001:2005
On successfully completing the course, trainees will have an appreciation of the importance of controlling Information Security in all types of business; a detailed knowledge of ISO 27001:2005 Information Security Requirements and a detailed understanding of the principal requirements for auditing Information Security Management Systems (ISMS).
The course is to provide interpretation and understanding of Information Security Management Systems (ISMS), ISO 27001:2005, auditing and monitoring of ISMS. The course is aimed at all levels of personnel from senior management to supervisors, who are concerned with the information security in their organization. The course will also equip delegates with a sound knowledge of the requirements of ISO 27001:2005 and knowledge of associated standards.
1. Introduction to Information Security
2. ISO 27001:2005 requirements
3. Similarities with other management systems standards
4. Information Security Management Issues
5. Including operational control
6. Information Security Internal Audit Skills
This course is recommended for personnel working in Information Security domain as well as for functional and cross functional management.
Duration & class size
The length of the course is 10 days and the maximum number of participants is 10.