Course / Course Details

ISO/IEC 27001 - Information Security Management System

  • Admin image

    By - Admin

  • N/A

Course Requirements


Are you looking to learn the basics of information security management? Are you a business , corporate entity or aspiring IT professional that needs to better understand on how information security works? If so, this is the perfect course for you! 

This certification covers - 

Identify malicious software and implement countermeasures

Identify common attacks and develop appropriate countermeasures

Recognize social engineering and reduce the risks associated with it

Recognize threats and types of attacks on wireless networks

Recognize threats and types of attacks on web applications

What risk management is

How BIA, BCP, and DRP differ one another and how they are the same

How to describe the impact of risks, threat, and vulnerabilities on an organization

How to close the information security gap

How to mitigate risk and achieve compliance with laws, regulations, and requirements

How to keep private data confidential

How to mitigate the risk of mobile workers and use of personal devices

What security administration is

What compliance is

What professional ethics are

What the infrastructure for an IT security policy is

What data classification standards are

What configuration management is

What the change management process is

What the system life cycle (SLC) and System development life cycle (SDLC) are

How software development relates to security

What standards organizations apply to information security

What ISO 17799 is

What ISO/IEC 27002 is

What PCI DSS is

What security auditing and analysis are

How to define your audit plan

What auditing benchmarks are

How to collect audit data

Which post-audit activities you need to perform

How to perform security monitoring

Which typed of log information you should capture

How to verify security controls

How to monitor and test your security systems

How risk management relates to data security

What the process of risk management is

What a risk assessment is

What the differences are between the quantitative and qualitative approaches to risk assessment

How to develop a strategy for managing risk

What countermeasures are and what factors you must consider when evaluating them

What the 3 types of activity controls and how they correspond to the security life cycle

What a business continuity plan (BCP) is and how organizations use it to make sure a disruption doesn't put them out of business

What role backups play in disaster recovery

What steps you should take to respond to security incidents

What a disaster recovery plan (DRP) does

What the primary steps to disaster recovery are

What the Open Systems Interconnection (OSI) Reference Model is

What the main types of networks are

What TCP/IP is and how it works

What network security risks are

What basic network security defense tools are

How wireless networks work and what threats they pose to network security

Course Description

ISO/IEC 27001 is the world's best-known standard for information security management systems (ISMS). It defines requirements an ISMS must meet.

The ISO/IEC 27001 standard provides companies of any size and from all sectors of activity with guidance for establishing, implementing, maintaining and continually improving an information security management system.

Conformity with ISO/IEC 27001 means that an organization or business has put in place a system to manage risks related to the security of data owned or handled by the company, and that this system respects all the best practices and principles enshrined in this International Standard.

Implementing ISO/IEC 27001 means your organization has put in place effective processes and trained staff to implement and maintain information security measures from time after time.

Course Outcomes

With cyber-crime on the rise and new threats constantly emerging, it can seem difficult or even impossible to manage cyber-risks. ISO/IEC 27001 helps organizations become risk-aware and proactively identify and address weaknesses.

ISO/IEC 27001 promotes a holistic approach to information security: vetting people, policies and technology. An information security management system implemented according to this standard is a tool for risk management, cyber-resilience and operational excellence.

Benefits

  •  Resilience to cyber-attacks
  •  Preparedness for new threats
  •  Data integrity, confidentiality and availability
  •  Security across all supports
  •  Organization-wide protection
  •  Cost savings 

Course Curriculum

  • 0 chapters
  • 0 lectures
  • 0 exams
  • N/A total length
Toggle all chapters
1 Introduction
N/A


2 What is Informational Security
N/A


3 What is an information security management system
N/A


1 The ISO ies Series Of Standards
N/A


2 About ISO IEC 27001
N/A


3 Uderstanding the organisation and its context
N/A


4 Understanding the needs and expectations of inter
N/A


5 Determining the scope of the ISMS
N/A


6 Information Security Mnagement System
N/A


1 Leadership and Commitment
N/A


2 Policy
N/A


3 Organisational
N/A


4 Action to Address risks and Opportunities
N/A


5 Information Security Risk Assessment
N/A


6 Information Security Risk Assessment
N/A


7 Information Security Risk Treatment
N/A


8 Information Security Risk Treatment
N/A


9 Information Security Objectives and Planning to account
N/A


10 Planning of Changes
N/A


11 Resources
N/A


1 Competence
N/A


2 Awareness
N/A


3 Communication
N/A


4 Documented
N/A


5 Control of documented information
N/A


6 Operational Planning and Control
N/A


7 Analysis and Evaluation
N/A


8 Internal Audit
N/A


9 Management Review
N/A


10 Continual Improvement
N/A


1 NonConformity and Corrective action
N/A


2 Information Security Controls
N/A


3 Policies, Roles and Responsibilities ,segregation of duties
N/A


4 Contact with authorities and with special interest groups
N/A


5 Inventory and acceptable use of information and assets. return of assets
N/A


6 Information classification and labelling
N/A


7 Information Transfer
N/A


8 Access Control
N/A


9 Identify management , authentication management
N/A


10 Information Security in supplier relationships and agreements
N/A


1 Information Security in the ICT supply chain
N/A


2 Monitoring, review and change management of supplier services
N/A


3 Information Security for use of cloud services
N/A


4 Information Security Incident , Management
N/A


5 Learning from incidents and collecting evidence
N/A


6 Information security during disruption and ict readiness for business continuity
N/A


7 Legal, Statutory, regulatory and contractual requirements
N/A


8 Independent review compliance with policies rules and standards
N/A


9 Documented operating procedures
N/A


1 Screening Terms and conditions of employment
N/A


2 Awareness, training and education, Disciplinary process
N/A


3 Termination or change of employment confidentiality agreements
N/A


4 Remote Working
N/A


5 Informational security event reporting
N/A


6 Security perimeters physical entry securing offices rooms and facilities
N/A


7 Physical security monitoring physical and environmental threats
N/A


8 Equipment siting and protection assets off premises
N/A


9 Storage Media
N/A


10 Supporting utilities cabling security
N/A


11 Equipment maintenance disposal or reuse
N/A


1 User End point devices
N/A


2 Privileged access rights information access restriction Access to source code
N/A


3 Secure authentication
N/A


4 Capacity Management
N/A


5 Protection against malware technical vulnerability management
N/A


6 Configuration management information deletion
N/A


7 Data Masking And Data Leakage Prevention
N/A


8 Backup And Redundancy of information processing facilities
N/A


1 Logging
N/A


2 Monitoring activities and clock synchronization
N/A


3 Privileged utility programs software installation on operational systems
N/A


4 Network Security
N/A


5 Security of network services and segregation of networks
N/A


6 Web Filtering
N/A


7 Use of Cryptography
N/A


8 Secure development life cycle application security requirements
N/A


9 Secure system architecture and engineering principles
N/A


10 Secure coding security testing in development and acceptance
N/A


11 Outsourced development
N/A


12 Separation of development test and production environments
N/A


1 Change Management
N/A


2 Test Information and the protection of systems during audit testing
N/A


1 Certification to ISO IES 27001
N/A


1 Thank You See You
N/A


Instructor

Admin

As the Admin of our platform, I bring over a decade of experience in managing and leading digital transformation initiatives. My journey began in the tech industry as a developer, and I have since evolved into a strategic leader with a focus on innovation and operational excellence. I am passionate about leveraging technology to solve complex problems and drive organizational growth. Outside of work, I enjoy mentoring aspiring tech professionals and staying updated with the latest industry trends.

0 Reviews
124 Students
56 Courses

No Review found

Student Feedback

Course you might like

Foundation
Certified ISO 9001:2015 Lead Auditor
ISO 9001 is a globally recognized standard for quality management. It helps organizations of all sizes and sectors to im...
Associate
Certified ISO 27001:2022 Lead Auditor
ISO 27001 Lead Auditor Certification is based on Information Security Management System (ISMS) and Global Compliance Sta...

You must be enrolled to ask a question

More Courses by Author

Discover Additional Learning Opportunities