ISO 27001 (BS 7799) Foundation Training Course

INTRODUCTION
ISO/IEC 27001 the Information security management systems standard gives recommendations for information security management for use by those who are responsible for initiating, documenting, implementing or maintaining security in their organisation. The standard is intended to provide a common basis for developing organisational security standards and effective security management practice and to provide confidence in the security of inter-organisational dealings. It specifies requirements for security controls to be implemented according to the needs of individual organisations.

ISO 27001 also specifies requirements for establishing, implementing and documenting information security management systems (ISMSs). It specifies requirements for security controls to be implemented according to the needs of individual organisations.

BUSINESS BENEFITS
Course delegates will be able to as a consequence of this course:

• Be aware of the aims and objectives of ISO 27001
• Understand the ISO 27001 Information security management Part 1:Code of practice for information security management and Information security management -Part 2: Specification for information security management systems content.
• Identify the need and create any additional processes and procedures reflecting the ISO 27001 Standard.
• Coherently answer questions regarding the ISO 27001 Standard
• Be QM&T validated and certificated ISO 27001 practitioner.

WHO SHOULD ATTEND?

• Security and Quality Professionals and Senior Management wishing to introduce the ISO 27001 Standard.
• Security Auditors

Course Structure & Time Table

• 0930 Arrival
• 0915 Introductions and Discussion of Course Objectives
• 0930 Elements of Information Security
• 0945 Exercise 1- Information (Coffee break during Exercise 1)
• 1000 Feedback & Discussion on Exercise
• 1015 Assets, Threats and Vulnerability
• 1030 Risk Analysis
• 1100 Exercise 2 - Risk Analysis
• 1130 Feedback & Discussion on Exercise
• 1200 Lunch
• 1300 Exercise 3 - Benefits of an ISMS
• 1320 Feedback & Discussion on Exercise
• 1330 ISO 27001 Parts 1 and 2
• 1430 Implementation of an ISMS
• 1500 Exercise 4 - Implementation (Coffee break during Exercise 4)
• 1540 Feedback & Discussion on
• 1600 Education and Staff Awareness
• 1615 Legal implication; Sarbanes-Oxley, Data Protection, Computer Misuse Act, etc.
• 1630 Review of Learning Objectives and Summary Discussion
• 1700 Finish (Approx)

Course dates and cost
See Training Courses for price list and order form for a one day course at the QM&T Training centre.