OBJECTIF

The ISO 27001 Lead Implementer training will allow you to acquire the expertise necessary to accompany an organization during the establishment, implementation implementation, management and maintenance of a Safety Management System for information (SMSM) in accordance with ISO 27001. This training is designed to provide you with the best of the best practices in Information Security Management Systems and to develop your skills to increase customer satisfaction of the organization, improve its efficiency and overall performance.

In particular, the objectives of the training are:

• Understand the correlation between ISO 27001 and other standards and regulatory frameworks.
• Know how to interpret the requirements of ISO 27001 in a specific context of the organization .

PREREQUISITES

A basic knowledge of the security of information systems

GENERAL INFORMATION

• Code : ISO 27001 LI
• Duration : 5 Days
• schedule : 8h30 - 17h30
• place : training center, Center Urbain Nord,Tunis

TARGETED AUDIENCE

• Expert Advisors in Information Technology
• Technical experts who want to prepare for a position in information security or for the management of a project related to information security

RESOURCES

• Course materials
• 40% demonstration
• 40% of theory
• 20% practical exercises

PROGRAM OF TRAINING

• Days 1
• Introduction to ISO / IEC 27001 and initialization of an ISMS

• Objectives and structure of the training
• Normative and regulatory frameworks
• Safety management system information
• Principles and fundamental concepts of Security Management System information
• Initialization of the implementation of the WSIS
• Understanding of the organization and clarification of the safety objectives of information
• Management system analysis existing

• Days 2
• Planning for the implementation of an ISMS h Leadership and endorsement of the WSIS project

• WSIS scope
• Information security policies
• Risk assessment
• Declaration of applicability and decision of the direction for the implementation of the WSIS
• Definition of the organizational structure of information security

• Days 3
• Implementing an ISMS h Defining a documentation management process

• Design of security measures and drafting of procedures and policies specific
• Communication plan
• Training and awareness plan
• Implementation of security measures
• Incident management
• Management of operational activities

• Days 4
• Monitoring, measurement, continuous improvement and preparation of the WSIS certification audit

• Monitoring, measurement, analysis and evaluation
• Internal Audit
• Management review
• Treatment of non-conformities
• Continuous improvement
• Preparation of the certification audit
• Competence and evaluation of implementers »
• Closing of the training

• Days 5
• Passing the exam
• Download the document