Certified ISO 27001 Lead Implementer and ISO 27005 Risk Management Combination Training Course

• Why information security management (ISM) is important to an organisation.
  
• The key concepts, principles and main requirements of ISO/IEC 27001:2013.
  
• The terms and definitions used in the Standard, including risk and options for risk assessments.
  
• How to interpret the requirements of ISO/IEC 27001:2013 to determine the scope of your ISMS.
  
• How to structure and manage your ISO 27001 project.
  
• How to review and map your existing controls to Annex A of ISO 27001.
  
• The importance of the Statement of Applicability (SoA), and justifications for inclusions and exclusions.
  
• The importance of information security risk management in ISO 27001 and its role within an organisation.

• A full overview of the ISO 27005 information risk management standard and an understanding of key risk management terminology.
  
• How ISO 27005 is related to the ISO 31000:2009 risk management standard.
  
• The key information security risk assessment processes, including context establishment, risk assessment, risk treatment and monitoring/review.
  
• How to assess, analyse and treat identified information security risks in accordance with the guidance of ISO 27005.
  
• How to develop a management framework, write policies and produce other critical documentation.
  
• How to prepare for your ISO 27001 certification audit and ensure you that you pass first time.
  
• How to manage and drive continual improvement under ISO 27001. 

Course agenda (day 1-3):

• Project mandate
  
• Project initiation
  
• ISMS initiation
  
• Management framework
  
• Baseline security criteria
  
• Risk management
  
• Implementation
  
• Annex A controls
  
• Measure, monitor, review and improve
  
• Certification

Course agenda (day 4-6):

• Risk Management in ISO 27001
  
• Establishing the context
  
• Scope, boundaries, roles and responsibilities
  
• Information Security Risk Assessment