ISO 27001 - ISMS Lead Implementer

Mastering the implementation and management of an Information Security Management System (ISMS) based on ISO/IEC 27001

This three-days intensive course enables participants to develop the necessary expertise to support an organization in implementing and managing an Information Security Management System (ISMS) based on ISO/IEC 27001:2013. Participants will also gain a thorough understanding of best practices used to implement information security controls from all areas of ISO/IEC 27002. 

This training is consistent with ISO/IEC 27032 (Guidelines for cybersecurity), ISO/IEC 27003 (Guidelines for the Implementation of an ISMS), ISO/IEC 27004 (Measurement of Information Security) and ISO/IEC 27005 (Risk Management in Information Security).

Participants should expect to gain understanding in the following areas after successful completion of this workshop:

• To acknowledge the correlation between ISO/IEC 27001, ISO/IEC 27002 and other standards and regulatory frameworks
• To master the concepts, approaches, methods and techniques used for the implementation and effective management of an ISMS
• To learn how to interpret the ISO/IEC 27001 requirements in the specific context of an organization
• To learn how to support an organization to effectively plan, implement, manage, monitor and maintain an ISMS
• To acquire the expertise to advise an organization in implementing Information Security Management System best practices

Introduction to Information Security Management System (ISMS)

• Course objectives and structure
• Standards and regulatory frameworks
• Information Security Management System (ISMS)
• Fundamental principles of Information Security Management Systems
• Initiating the implementation of an ISMS
• Understanding the organization and clarifying the Information Security objectives
• Analysis of the existing management system

Planning the implementation of an ISMS based on ISO/IEC 27001

• Leadership and approval of the ISMS project
• ISMS scope
• Information Security policies
• Risk assessment
• Statement of Applicability and top management`s decision to implement the ISMS
• Definition of the organizational structure of Information Security

Implementing an ISMS based on ISO/IEC 27001

• Definition of the document management process
• Design of security controls and drafting of specific policies & procedures
• Communication plan
• Training and awareness plan
• Implementation of security controls
• Incident Management
• Operations Management

ISMS monitoring, measurement, continuous improvement and preparation for a certification audit

• Monitoring, measurement, analysis and evaluation
• Internal audit
• Management review
• Treatment of non-conformity
• Continual improvement
• Preparing for the certification audit
• Competence and evaluation of implementer
• Closing the training

• Managers or consultants involved in Information Security Management
• Expert advisors seeking to master the implementation of an Information Security Management System
• Individuals responsible for maintaining conformance with ISMS requirements
• ISMS team member

There are no formal prerequisites, however, basic knowledge of Information Security is recommended. 

Special Offer:

* Free Lifetime Course Revision

GRC Simplified offers FREE lifetime revisions to its valuable training participants, who want to refresh their concepts. Participants are welcome to attend training again for FREE.

• This offer can only be availed by the participants who attends our training sessions in 2020 and onwards.
• For revision, participants may join any of our pre-scheduled open-enrollment training session at any location worldwide. 
• Participants are welcome do more than one revisions, as required.
• Revision participant shall pay the training logistic expenses.
• This offer shall not be applicable if the course version changes (e.g. PMP based on PMBOK v5 to v6).
• Training attendance certificate shall not be issued to revising participants.
• This offer is valid for training courses only; examinations of any kind are not part of this offer.
• This offer subjects to the confirmation of training session, and the availability of space.
• The terms and conditions are subject to change without any prior notice.

* Exceptional post training support

GRC Simplified believes in longer-term relationship with our customers. As one of our valued training participants, you can call us, email us, or setup a meeting with us in our office if you are facing any difficulty in implementing the concepts you learnt from us.