ISO 27001:2013 INFORMATION
SECURITY MANAGEMENT SYSTEMS
INTERPRETATION, DOCUMENTATION
& INTERNAL AUDIT
3-DAYS COURSE
COURSE CONTENT
• Detail requirements of information
security management system
• Control objectives and control for
security management system
• Compatibility of ISO 27001:2013 with
other standards
• Cross reference between ISO
27001:2013 with ISO 9000 and ISO
14001
• Systematic approach to risk
assessment – PDCA model
• Risk identification and assessment
• Treatment identification and evaluation
• Selecting control objective and control
for the treatment of risk
• Defining statement of applicability
• Continual improvement
By the end of this course,
delegates will be able to:
• Explain the process-based information
security management system model
for ISO/IEC 27001, with reference to
the Plan-Do-Check-Act (PDCA) cycle,
and the role of internal audit in the
maintenance and improvement of
information security management
systems;
• Explain the role and responsibilities of
an auditor to plan, conduct, report and
follow-up an information security
management system internal audit, in
accordance with ISO 19011;
• Plan, conduct, report and follow-up an
internal audit of part of an information
security management system based
on ISO/IEC 27001 in accordance with
ISO 19011.
WHO SHOULD ATTEND
• Representative of company
who concern to protect 0800 1000 565
company’s information and www.facebook.com/sgsglobalacademy
data
Id.sgsacademy@sgs.com
• Professional in Information
and Technology
COURSE DURATION: 3 (Three)
• Professional in Banking,
DAYS
Insurance and any Finance
DELIVERY METHODOLOGY:
Institution
• Personnel who involved in FACE TO FACE
operating and maintaining COURSE LANGUAGE: BAHASA
Data Centre and Data Base
ACCREDITATION: SGS
application in the company,
INDONESIA
e.g. SAP
COURSE FEE: IDR 5,400,000,-
• Personnel who involved in
(exclude VAT)
establishing, implementing
and maintaining
COURSE DESCRIPTION
management system based
on ISO 27001 The purpose of this course is to
• Management Representative equip delegates with the
• Manager/ Section Head knowledge and skills needed to
Level perform internal audits on
• Supervisor/ Officer Level information security management
• Consultants, etc. systems and to contribute to the
continual improvement of the
management system. Delegates
Learners will need to attend
are expected to have knowledge of
100% of the course to
information security management
successfully complete the systems and ISO/IEC 27001:2013
course. before attending this course. The
background knowledge is provided
on the Information Security
Contact : Management Systems Introduction
and Awareness Course.
SGS Academy
Cilandak Commercial Estate
The Garden Centre 2nd Fl.
Jl. Raya Cilandak KKO, Jakarta
Ph. 021 2978 0600 ext 2337
Email: Farrah.Cardifana@sgs.com