ISO 27001: Applying ISO 27001 in the Real World

Course Overview

This two day practical course describes how to perform each step towards gaining and maintaining the ISO 27001 (formerly BS 7799) standard, with particular focus on the changes from BS 7799. The course covers achieving compliance and preparing for formal certification, and offers clear explanations and practical solutions to areas that have caused difficulties for many companies. Emphasis is placed on explaining not only how to comply with the standard but also how to demonstrate compliance to external auditors. Most importantly, it explains how to realise the true business benefits of implementing ISO 27001.

Audience

Staff with responsibility for information security management or implementation of ISO 27001 including security managers, auditors, project managers, operations managers and business managers.

Skills Gained

On completion of the course, delegates will have the skills and knowledge to plan, implement and maintain an ISO 27001 compliant information security management system (ISMS) within their organisation.

This course will enable delegates to:

• Understand the differences between BS 7799 and ISO 27001
• Understand the new requirements of the ISO 27001 standard
• Achieve maximum benefit from your Information Security Forum
• Define the scope of an ISMS
• Prepare an effective security improvement plan
• Estimate cost and prioritise resources
• Undertake risk assessment and treatment
• Plan and run an audit programme
• Demonstrate compliance to an auditor
• Maintain compliance

Prerequisites

No pre-requisites have been defined for this course

Course Outline

Introduction to ISO 27001

Application of ISO 27001

Planning for ISO 27001

Maintaining ISO 27001

Follow On Courses

• 1998 Data Protection Act Foundation [ DPAF ]
• ISEB Practitioner Certificate in Information Risk Management [ PCIRM ]
• Introduction to Governance [ ITG ]
• Management of Risk Certificate [ MOR ]

ISO 27001: Applying ISO 27001 in the Real World / BSRW