ISO/IEC 27001 (ISO 27001) is an international standard for Information Security management. It provides a model to establish, implement, maintain and continually improve a risk-managed Information Security Management System (ISMS). ISO/IEC 27001 provides a model for creating, implementing, exercising, auditing, maintaining and improving an information security management system. Goals The delegates understand: - Scope, objectives, key terminology and purpose of ISO/IEC 27001 and how it can be used - Demonstrate they can apply ISMS concepts to achieve the requirements of ISO/IEC 27001 and supporting standards within an organizational context - Assist and advise organizations in achieving conformance to ISO/IEC 27001 and certification - Understand, explain and advise on issues regarding applicability and scope definition - Apply principles of risk management, appropriate treatments and controls to reduce business risk, support business objectives - Analyze and evaluate deployed risk treatments and controls to assess their effectiveness and opportunities for improvement - Relationship with best practices and and other standards Pre-requisite The course requires successful achievement of ISO.IEC 27001 Foundation certification. Audience Internal and external persons who fulfill a role in the area of information security management External Consultants Internal Auditors What is included: - Training Slides - Exam voucher - Certificate of Attendance The standard is not included. It can be purchased from https://www.iso.org 4.5-days (virtual online) in 2 weeks: October 14, 15, 21, 22, 23 Price: EUR 2,200 + VAT Time Zone: Central European Time Groups of 5 or more receive 10% discount. Register for both Foundation and Practitioner-Information Security Officer courses together and receive 5% discount. The discounts are not cumulative – the highest discount always applies. Contact us at contactus@gira.group for more information.