Information Security Foundation based on ISO/IEC 27002

Information is the lifeblood of today's organisation and ensuring that information is simultaneously protected and available is essential to modern business operation. ISO/IEC 27001 provides the specification for an information security management system and ISO/IEC 27002 draws on the experience of practitioners in over 40 countries to set out the best practice for the delivery of effective information security.

Closely aligned with the ISO27001 Standard, ISO27002 serves as a practical guideline for all members of staff as they initiate, implement and maintain an information security programme. An understanding of the best practice guidance as outlined in ISO2702 is essential to ensure the compliance to ISO27001 in any organisation.

The ISO27002 ISMS Foundation Course delivers a comprehensive education in ISO27002 best practice and a recognised industry standard certification awarded by EXIN.

Available dates

• 20 Sep 2011

Who is this course suitable for?

The one-day ISO27002 ISMS Foundation Course is designed for anyone in an organisation who is interested or responsible for the implementation of an effective information security programme based on the ISO27001/2 Standards. It is particularly suited for managers who are responsible in any way for the security or availability of confidential information assets. This includes Information Security, IT Service Management, Data Protection Officers and all Heads of Department.

Achieve EXIN Certification

This course is based on the EXIN Information Security Foundation syllabus and prepares delegates for the EXIN ISFS examination which is taken at the end of the day. Successful candidates will be awarded the EXIN Information Security Foundation Certificate.

What does this course cover?

During the course you will learn about:

· The contents of ISO27002 and its relationship to ISO27001

· Key roles and responsibilities of all staff responsible for information security

· Information and data relationships (security, governance, assurance)

· Defining threats and vulnerabilities and understanding Risk Management

· Risk analysis with an understanding of Impacts, Likelihood and Probability

· Required policies and Information Security Plan

· External relationships with 3rd party organisations and individuals

· Information Architecture and data flows

· Protective marking and the relationship to Impact (Risk)

This course is presented by an experienced trainer in a class-room format and includes relevant workshop exercise and discussion sessions. Full course materials will be provided to all delegates.

Are there entry requirements?

There are no formal entry requirements. The course is designed to provide a comprehensive introduction to information security management. Given the close relationship of ISO27002 with ISO27001, we strongly recommend that delegates attend our ISO27001 ISMS Foundation Course prior to taking this course.

Additional Information

Part of the ISO27001 Training Programme

The ISO27002 Foundation Course complements our existing range of training courses and is a key element in a fully integrated and unique programme of ISO27001 education. This programme features Foundation and Advanced level courses which include the ISO27001 ISMS Lead Implementer and ISO27001 ISMS Internal Auditor Courses.

For further information on the importance and role of ISO27001 and ISO27002 in implementing an effective information security programme, please see ISO27001/ISO27002 A Pocket Guide by Alan Calder, which is available from the IT Governance bookstore.