Overview

In this course, we look at the ISO 27001:2013 standard, regarding Information Security Management System. It is a beginner course, which provides an introduction to the standard, with explanations of all the various clauses and appropriate control measures to stay compliant, together with examples on how the standard may apply to a business. It is a good basic course to start with and build your understanding of the ISO 27001:2013 standard!This standard is a guideline for quality business practices, part of an organisation's Quality Management System (QMS). Specifically, it focuses on information security - be it in the form of physical, or virtual information assets. As such, it is applicable to all businesses in this day and age, where activities are increasingly digitalised.With a proper system in place, companies are able to embrace digital transformation confidently, thereby staying current and competitive internationally.Still, to know how to properly set up and keep this system in place, one needs to have a proper understanding of the standard, with its clauses. If you are looking to achieve this, here is a course that can help you.--Course Outline:Section 1 > Introduction, history and general concepts of ISO 27001:2013Section 2 > Clause-by-clause guidance for ISO 27001:2013Section 2-1 > Clause 1 to 3 + Clause 4: Context of the organisationSection 2-2 > Clause 5: LeadershipSection 2-3 > Clause 6: Planning for the Food Safety Management SystemSection 2-4 > Clause 7: SupportSection 2-5 > Clause 8: OperationsSection 2-6 > Clause 9: Performance EvaluationSection 2-7 > Clause 10: ImprovementSection 2a > Clause-by-clause guidance for ISO 27001:2013 Annex ASection 2-8 > Annex A.5 Information security policiesSection 2-9 > Annex A.6 Organisation of information securitySection 2-10 > Annex A.7 Human resource securitySection 2-11 > Annex A.8 Asset managementSection 2-12 > Annex A.9 Access controlSection 2-13 > Annex A.10 CryptographySection 2-14 > Annex A.11 Physical and environmental securitySection 2-15 > Annex A.12 Operations securitySection 2-16 > Annex A.13 Communications securitySection 2-17 > Annex A.14 System acquisition, development and maintenanceSection 2-18 > Annex A.15 Supplier relationshipsSection 2-19 > Annex A.16 Information security incident managementSection 2-20 > Annex A.17 Information security aspects of business continuity managementSection 2-21 > Annex A.18 ComplianceSections 3 > Preparation of DocumentationSection 4 > ImplementationSection 5 > Verification of your implementation

Skills

Reviews