ISO 27001 Lead Implementer Program

This three-day training will help participants to develop the essential expertise to support their organization in establishing, implementing, managing and to maintain an Information Security Management System (ISMS) based on ISO 27001 framework.

What You Will Learn:

• Participant will gain a comprehensive understanding of the best practices of ISMS in order to secure the sensitive information of the organization and to improve the overall performance and effectiveness.
• By completing the program, participant will master the concepts, tactics, methods and techniques used for implementation and effective management of an ISMS.

Who Should Attend:

• The program is designed and suited for individuals and Managers who are responsible for maintaining conformance with the requirements of ISMS.

Course Structure:

• Day 1
• Introduction to ISO 27001, initiation and planning implementation of an ISMS
• Course objectives and structure
• Standards and regulatory frameworks
• Fundamental principles of ISMS
• Initiating the implementation of an ISMS
• Understanding the organization and clarifying the Information Security objectives
• Analysis of the existing management system
• Managing Leadership approval on ISMS project
• ISMS Scope
• Information Security policies & Risk assessment
• Statement of Applicability and top management’s decision to implement the ISMS
• Definition of the organizational structure of Information Security
• Day 2
• Implementation of an ISMS, monitoring and measurement
• Definition of the document management process
• Plan, Do, Check and Act
• Design of security controls and drafting of specific policies & procedures
• Communication plan
• Training and awareness plan
• Implementation of security controls
• Incident & Operations Management
• Monitoring, measurement, analysis and evaluation
• Treatment of non-conformities
• Day 3
• Preparing for certification audit and continual improvement
• Competence and evaluation of implementer
• Developing metrics, performance indicators and dashboard according to ISMS
• Preparing for an ISMS certification audit
• Understanding initial and stage 2 (full audit) requirement
• Management review of ISMS
• Developing training and awareness program
• Implementation of Continual improvement program