| 7 Steps to
building an ISMS with ISO 17799/BS7799
|
|
Overview
This Three -day intensive course is designed to give
a walk through of the business process of establishing,
implementing and maintaining an Information Security
Management System (ISMS) based on the ISO/IEC 17799:2000
and BS 7799:2:2002 standards.
Its core focus is to train participants on practical
steps involved in building and implementing an ISMS
so equips and prepares delegates for the necessary skills
to implement an ISMS that is compliant with the requirements
of ISO 17799 and meets the certification requirements
of BS 7799 part 2.
|
|
Course
Benefits
• Understand the purpose of an information security
management system (ISMS)
• The processes involved in establishing, implementing,
operating, monitoring, reviewing and improving an ISMS
as defined in ISO/IEC 17799/BS 7799-2:2002
• Receive hands-on exposure to variety of Risk
Assessment Tools and Techniques
• Understand and ask the pertinent questions required
for a ISO 17799/BS 7799 Gap Analysis
• Prepare an effective security improvement plan
• Knowledge and Skills for advising on compliance
to the standard
|
|
Who
should attend?
• Managers/Business Heads with responsibility
for implementing information security
• Management representatives
• Information Security Consultants
• All others seeking to plan, and implement, an
advanced information security mgt.system
Required Prerequisites
Participants are expected to have some prerequisite
knowledge of information security and ISO/IEC 17799
/BS 7799 standards, or must have been exposed to other
Management System Standards such as ISO 9000 or ISO
1400 series.as implementors or consultants”.
|
Course
Outline
A combination of tutorials, syndicate exercises &
role play, including the following seven steps for successfully
managing and maintaining information Security in organisations:
1. Security Policy: Designing Security Policy and procedures
2. ISMS Scope : Defining the ISMS Scope
3. Risk Assessment: Techniques
4. Risk Treatment: Control selection based on BS7799-2:2002.
5. ISMS Implementation: Operation and Documentation
including Preparation of Statement of Applicability.
6. Certification process, surveillance visits and
re-certification
7. The continual improvement program
• Monitoring, reviewing and checking the ISMS
• Implementing corrective and preventive controls
|
|
Register to Know more -->
info@acpl.com
|
 |
| How We Do It
• Hands-on Information Security & Assurance
Training in personal workshops
• Full curriculum from finding to fixing Exploits,
Best Practices & Vulnerabilities
• Provide IT Practitioners Security Fundamentals
to Risk Management skills.
• Classes available nationally and world wide
(Public, In-house & Custom classes)
Why You Need It
• Your assets are more vulnerable than you know
• Protect your company, network & and system
from attack
• Learn How to Plan, Implement, Build & Maintain
a complete security strategy
What You Get
• The most current information for security products
and developments
|
|
