ISO/IEC 27001 Lead Implementer

Audience
The course is aimed at managers, consultants, IT and security officers, project managers, compliance staff, ISMS teams or others who will plan, lead or participate in the implementation and maintenance of an information security management system based on the standard. It is suitable for those who want expertise in establishing a holistic information security management system (ISMS), ensuring compliance with requirements and leading security and risk management in the organization.

Learning objectives
Participants will understand the fundamental concepts and principles of information security and management systems as defined in ISO/IEC 27001. Students will learn to interpret the requirements of ISO/IEC 27001 in the role of implementer, plan and initiate implementation of an ISMS, including risk management, policies, control measures, organizational structure, documentation and processes. Furthermore, they will learn to operationalize the management system by implementing the necessary controls, establishing operating and maintenance routines, and ensuring continuous monitoring, evaluation, improvement and preparation for certification.

After completing the course you will be able to

• Explain basic concepts and principles of information security management (ISMS) according to ISO/IEC 27001
• Interpret and apply ISO/IEC 27001 requirements for implementation in your organization
• Plan, initiate and lead the implementation of an ISMS with risk-based approach
• Selecting and implementing appropriate security controls, policies, procedures and documentation
• Establish routines for the operation, maintenance, monitoring, evaluation and continuous improvement of ISMS
• Prepare your organization for certification audit and ensure compliance over time