ISO 27001 webinar series
ISO 27001 is the international standard that describes best practice for an information security management system (ISMS). An ISMS is a set of policies, procedures, processes and systems that manage information risks such as cyber attacks, hacks, data leaks and theft.
Implementing an ISO 27001-certified ISMS can help your organisation avoid the penalties and losses associated with data breaches, and comply with legal and regulatory requirements such as the General Data Protection Regulation (GDPR).
This series of expertly designed webinars will guide organisations through the ISO 27001 certification process from beginning to end.
Presented by Steve Watkins
Steve is a director at IT Governance, chair of the ISO/IEC 27001 User Group, the UK chapter of the ISMS International User Group, and contracted technical assessor for UKAS – advising on its assessments of certification bodies offering ISMS/ISO 27001 and ITSMS/ISO 20000 accredited certification.
Certification to ISO 27001 requires a serious amount of time and commitment to develop and implement an ISMS.
The initial certification/registration audit is often a daunting prospect for organisations undertaking certification for the first time.
The registration body will review your management system documentation and check that you have an effective ISMS and have implemented appropriate security controls.
Read more >>
Steve Watkins will shed light on what a certification audit entails, and provide you with expert advice to help your organisation succeed the first time. The session will cover:
- Choosing a certification body – why it’s important to make the right choice;
- Preparing for the certification audit;
- The certification audit process; and
- Common audit pitfalls and how to avoid them.
Increasingly stringent data security laws and regulations, combined with a rapidly evolving cyber threat landscape, call for stronger, smarter and more robust data security solutions.
ISO 27001 is the international standard that sets out the requirements for an information security management system (ISMS), a best-practice approach to managing information security that encompasses people, processes and technology.
Read more >>
This webinar will deal with the establishment and implementation of an ISMS in line with international information security best practice, including:
- How to get senior management on board and retain their commitment;
- The nine steps to success;
- Common pitfalls and challenges, and how to overcome them; and
- How to cut costs and ensure your project delivers on its objectives.
ISO 27001 is the international standard that specifies the requirements for an ISMS, a best-practice approach to addressing information security that encompasses people, processes, and technology.
The assessment and management of risks is at the core of ISO 27001, which ensures that the ISMS continually adapts to changes in the organisation and the environment in which it operates.
Read more >>
This webinar will unpack the components of an effective risk management approach, and impart valuable lessons learnt so that attendees can apply it in their organisation at little or no cost. It will cover:
- Establishing a risk management framework;
- Identifying risks to the ISMS;
- Conducting an information security risk assessment;
- Taking risk decisions and choosing risk treatment options; and
- Reporting and following up.