Anyone who wants to learn about:
- Identifying and analysing information security risks
- How risks can be evaluated
- What treatments, controls and measures can be implemented in order to mitigate risks
- Ongoing governance and risk monitoring processes
The course is applicable to individuals from any size or type of organization who are currently involved in (or will be in the future) planning, implementing, maintaining, supervising or assessing information security, as part of an ISO/IEC 27001 ISMS or a standalone system.
Prerequisites
You should have a basic knowledge of ISO/IEC 27001 and ISO/IEC 27002, as well as an understanding of the key principles of an ISMS.
We also recommend that you have an awareness of generic risk assessments and a basic understanding of information security principles and terminology.
Some delegates on this course will have already attended our Information Security Management System (ISMS) Requirements of ISO 27001 or Information Security Management System (ISMS) Implementing ISO/IEC 27001 course.
We also recommend delegates have an understanding of the risk assessment approach currently employed in their organizations, should one exist.
By the end of this course delegates will be able to:
- Explain concepts specific to information risk management, including terms and definitions
- Recognize typical information security risks faced by organizations
- Identify typical information security risk management concerns
- Communicate ISO/IEC 27005:2018 introduction, background, purpose, scope and structure
- Explain how ISO/IEC 27005:2018 integrates and interfaces with other standards, such as ISO/IEC 27001
- Implement the topics covered in ISO/IEC 27005:2018 within your organization
- Determine the value of the information assets under your control
- Evaluate threats to information assets
- Identify, analyze and evaluate information security risks
- Prioritize and choose appropriate risk treatments
- Course notes
- On completion, you will be awarded an internationally recognized BSI Training Academy certificate.
This is a 2 day public classroom course.