ISO 27001:2013

Introduction

ISO 27001:2013 is part of the ISO27000 family of standards which includes a significant number
of supporting guidance documents that will enable an organization to achieve establishing
global standards of practices in information security management system (ISMS). The
framework of information security management system involves key processes that will ensure
the safeguarding and protection of the data driven business systems from cyber-attacks. Hence
this training program is designed to deliver the foundational understanding of the framework of
ISMS that will provide the organization with clear direction to proceed to the next level of
engaging in the development, implementation and maintenance of effective ISMS.

Aim

To enlighten the program participants with key processes involved in the framework of ISMS
under the auspices of ISO 27001:2013.

Course Outline Contact Hours

 Introduction to ISO 27001:2013 ( to be discussed)

 The structure of ISO 27001:2013
- Awareness
- Implementation
- Internal Audit
- Risk Management
 Information Security Principles
 Introduction to the Information Security Management System (ISMS)
 Implementing ISO 27001:2013 Requirements
 Implementing ISO 27001:2013 as a project
 Documenting ISO 27001:2013 Requirements
 Benefits of ISO 27001:2013
 Related Documentation

Teaching and Learning Method

 Online techniques