Introduction

ISO 27001, titled “Information Security Management – Specification With Guidance for Use”, is intended to provide the foundation for third party audit, and is ‘harmonized’ with other management standards, such as ISO 9001 and ISO 14001. ISO 27001 specifies requirements for the establishment, implementation, monitoring and review, maintenance and improvement of a management system – an overall management and control framework – for managing an organization’s information security risks. It does not mandate specific information security controls but stops at the level of the management system.

NIMIS is proud to organize trainings for this world renowned certification on regular basis. The experienced and certified instructors of NIMIS present the difficult concepts of ISO 27001 in organized and understandable manner.

This course is organized in a way to teach the participants the skills to thoroughly understand ISO 270001. The course also emphasizes on the importance of information security and the successful implementation of this standard.

Contents

Information Security Basics

Core definitions and concepts
Vulnerabilities, threats and their relation
Rules for managing information security

Controls Explained

Basics
Defining scope
Risk Assessment
Policy in understandable way
Information Security Categorized
Concepts about identifying, managing and classifying assets
Protecting HR
Protection physically
Streamlining Operations and inter-communication
Maintaining Access Control
Maintaining and building information systems
Defining and implementing Business Continuity
Seamless Incident Management
Complying with legal and technological regulations
Documentation explained

Achieving certification

Best implementation strategy
Certification steps detailed

Benefits

Enhanced Knowledge and Skills

• Demonstrate a working knowledge of information security

• Offers international differentiator, solid credibility and undisputable marketability to career.

Career Advancement

• To obtain credentials that employers seek

• To enhance your professional image

Benefits to the Enterprise

• Complete knowledge about the ISO 27001 standard

• Thorough understanding of information security policies and controls

• Knowledge of carrying out a Risk Assessment

• In-depth knowledge of Deming cycle

• Can implement ISMS afterwards

Who Should Attend?

This course is for managers and practitioners who have a role both in and around the strategy, design, and implementation and ongoing operation of business IT services and who require an insight into ISMS.

Mock Exam

A standardized mock exam at the end of the training is also a part of the program.

Materials Provided

• Course reference manual containing copy of course slides, support documents, exercises and case study, and their solutions

• CD containing relevant course material

• Course Certificate