ISO 27001:2013

Information security is one of the central concerns of the modern organisation. The volume and value of data used in everyday business increasingly informs how organisations operate and how successful they are. In order to protect this information – and to be seen to be protecting it – more and more companies are becoming ISO 27001 certified.

The purpose of this paper is to help you understand ISO27001 certification and explore the benefits of following the information security rules set by the Government.

• What is ISO 27001?
• How does this standard help organisations more effectively manage their information security?
• What is the relationship between ISO 27001 and ISO 27002?
• What is the value of ISO 27001 certification?
• How do these standards relate to ISO 9001?
• What does someone need to know to initiate, or take on responsibility for, an organisational information security project and, specifically, one that is intended to lead to ISO 27001 certification ?

Topics Covered:

• Module 01:    Introduction and scope of the standard
• Module 02:    Context of the organization
• Module 03:    Key Terms and Definition
• Module 04:    Fundamental Requirements
• Module 05:    Uses of Controls to Mitigate IS Risks
• Module 06:    Internal and External Audits
• Module 07:    Performance Evaluation
• Module 08:    Improvement