OBJECTIF

The training "ISO / IEC 27005 Risk Manager" will allow you to develop the skills to master the processes related to all relevant assets for the information security by using ISO / IEC 27005 as a framework for reference. During this training, we will also present other risk assessment methods such as OCTAVE, EBIOS, MEHARI and the harmonized methodology of EMR. This training fits perfectly into the implementation process of the WSIS framework according to ISO / IEC 27001.

In particular, the objectives of the training are:

• Understand concepts, approaches, methods and techniques for an effective risk management process in accordance with ISO / IEC 27005.

PREREQUISITES

• Basic understanding of ISO / IEC 27005 and in-depth knowledge of risk assessment and information security.

GENERAL INFORMATION

• Code : ISO 27005
• Duration : 3 jour
• schedule : 8h30 - 17h30
• place : training center, Center Urbain Nord, Tunis

TARGETED AUDIENCE

• Information Security Risk Managers
• Members of the information security team
• Information Security Officers

RESOURCES

• Course materials
• 40% demonstration
• 40% of theory
• 20% practical exercises

PROGRAM OF TRAINING

• Days 1
• Introduction to the risk management program according to ISO / IEC 27005

• Objectives and structure of the training
• Concepts and definitions of risk
• Normative and regulatory frameworks
• Implementation of a management program risks
• Understanding of the organization and its context

• Days 2
• Implementation of a risk management process in accordance with ISO / IEC 27005

• Risk identification
• Risk Analysis and Assessment
• Risk assessment with a method quantitative
• Risk treatment
• Risk acceptance and risk management residual
• Communication and consultation relating to risks in information security
• Surveillance and risk review

• Days 3
• Overview of Other Methods of Assessing Information Security Risks and Certification Examination.

• OCTAVE method
• MEHARI method
• EBIOS method
• Harmonized methodology of EMR
• Closing of the training

• Download the document