The ISO 27001 program explains how to build, implement, and maintain an Information Security Management System (ISMS).
Key Topics Covered:
1. Introduction to ISO 27001
- What ISO 27001 is and why it is important
- Benefits of an ISMS
- Scope and certification process
2. Context of the Organization
- Understanding internal and external issues
- Interested parties and information security needs
- Defining the ISMS scope
3. Leadership and Planning
- Information security policy
- Roles, responsibilities, and accountability
- Risk assessment and risk treatment planning
4. Information Security Risk Management
- Identifying information assets
- Threats, vulnerabilities, and impacts
- Risk evaluation and acceptance
5. Annex A Controls
- Organizational controls
- People controls
- Physical controls
- Technological controls
- Selecting and implementing controls
6. Operation of the ISMS
- Implementing risk treatment plans
- Managing documented information
- Operational planning and control
7. Performance Evaluation
- Monitoring and measuring ISMS performance
- Internal audits
- Management review
8. Improvement and Audit Preparation
- Handling nonconformities and corrective actions
- Continual improvement
- Preparing for certification audits
Review ISO 27001 – Information Security Management System (ISMS).