ISO 27001 Lead Implementer Training Course

The standards and regulatory frameworks learning module will focus on the definition of ISO and 27001 family standards

• What is ISO?
• The ISO 27001 family of standards
• Advantages of ISO/IEC 27001

A professional will learn more about management system standards and process approach

• Definition of a management system
• Management system standards
• Integrated management systems
• Definition of an ISMS
• Process approach

Fundamental information security concepts and principles will focus on the lessons on information and asset, information security, and many more

• Information and asset
• Information security
• Availability, confidentiality, and integrity
• Vulnerability, threat, and impact
• Information security risk
• Classification of security controls

In the initiation of the ISMS, the implementation module will define the approach to the implementation

• Define the approach to the ISMS implementation
• Proposed implementation approaches
• Application of the proposed implementation approaches
• Choose a methodological framework to manage the implementation of an ISMS
• Approach and methodology
• Alignment with best practices

Understanding the organization and its context to mission, objectives, values, and ISMS objectives

• Mission, objectives, values, and strategies of the organization
• ISMS objectives
• Preliminary scope definition
• Internal and external environment
• Key processes and activities
• Interested parties
• Business requirements

The ISMS scope of the boundary of the organizational boundaries and physical boundaries

• Boundary of the ISMS
• Organizational boundaries
• Information security boundaries
• Physical boundaries
• ISMS scope statement

The leadership and project approval learning module will focus on business case and resource requirements

• Business case
• Resource requirements
• ISMS project plan
• ISMS project team
• Management approval

The organizational structure module will focus on the information security coordinator

• Organizational structure
• Information security coordinator
• Roles and responsibilities of interested parties
• Roles and responsibilities of key committees

To determine the current state analysis of the existing system.

• Determine the current state
• Conduct the gap analysis
• Establish maturity targets
• Publish a gap analysis report

The information security policy learning module will focus on types of policies, information security policy

• Types of policies
• Policy models
• Information security policy
• Specific security policies
• Management policy approval
• Publication and dissemination
• Training and awareness sessions
• Control, evaluation, and review

The risk management learning module has lessons on risk assessment approach, methodology, identification

• ISO/IEC 27005
• Risk assessment approach
• Risk assessment methodology
• Risk identification
• Risk estimation
• Risk evaluation
• Risk treatment
• Residual risk

The documented information management learning module will emphasize the value and types of documented information

• Value and types of documented information
• Master list of documented information
• Creation of templates
• The documented information management process
• Implementation of a documented information management system
• Management of records

The selection and design of the controls learning module will focus on the organization's security architecture

• Organization’s security architecture
• Preparation for the implementation of controls
• Design and description of controls

The implementation of controls learning module will focus on introduction of Annex A controls

• Implementation of security processes and controls
• Introduction of Annex A controls

• Competence and people development
• Difference between training, awareness, and communication
• Determine competence needs
• Plan the competence development activities
• Define the competence development program type and structure
• Training and awareness programs
• Provide the training

In this module learn about trends & technologies, big data, artificial intelligence, cloud computing, and more.

• Big Data
• The three V’s of big data
• Artificial Intelligence
• Machine learning
• Cloud computing
• Outsourced operations
• The impact of new technologies in information security

Learn about principles of effective communication strategies, evaluating communication, establishing communication objectives, and more

• Principles of an effective communication strategies
• Information security communication process
• Establishing communication objectives
• Identifying interested parties
• Planning communication activities
• Performing a communication activity
• Evaluating communication

In this module, learn about statement of applicability, management approval, justification of selected controls, and more

• Drafting the statement of applicability
• Management approval
• Review and selection of the applicable information security controls
• Justification of selected controls
• Justification of excluded controls

This module will emphasize on change in management planning, management of operations, Incident response team, Forensics process, and more.

• Change management planning
• Management of operations
• Resource management
• ISO/IEC 27035-1 and ISO/IEC 27035-2
• ISO/IEC 27032
• Information security incident management policy
• Process and procedures for incident management
• Incident response team
• Incident management security controls
• Forensics process
• Records of information security incidents
• Measure and review of the incident management process

In this module, learn about measurement objectives, ISMS performance indicators, and also know what needs to be measured and monitored.

• Determine measurement objectives
• Define what needs to be monitored and measured
• Establish ISMS performance indicators
• Report the results

This module will focus on what is an audit?, types of audit, how to create internal audit programs ,and more.

• What is an audit?
• Types of audit
• Create an internal audit program
• Designate a responsible person
• Establish independence, objectivity and impartiality
• Plan audit activities
• Perform audit activities
• Follow up on nonconformities

This module will put emphasis on how to prepare, conduct and manage a management review

• Preparing a management review
• Conducting a management review
• Management review outputs
• Management review follow-up activities

In this module, learn about root-cause analysis process, tools, corrective action procedure and preventive action procedures

• Root-cause analysis process
• Root-cause analysis tools
• Corrective action procedure
• Preventive action procedure

Learn about continual monitoring process, maintenance and improvement of ISMS, documentation of improvement etc

• Continual monitoring process
• Maintenance and improvement of ISMS
• Continual update of the documented information
• Documentation of the improvements

In thi module, learn the necessary steps for preparing the certification audit process

• Selecting the certification body
• Preparing for the certification audit
• Stage 1 audit
• Stage 2 audit
• Follow-up audit
• Certification decision