ISO 27001 training

SMSI ESTATE

• Overview of the Standard and the certification cycle
• Safety issues
• Stakeholders and requirements
• Legal and contractual requirements
• WSIS scope of application
• Leadership and commitment
• Information security policy
• Roles, responsibilities and authorities within the organization

RISK ANALYSIS

• Asset identification
• Methodology and criteria definitions
• Risk identification
• Risk analysis
• Risk assessment
• Risk management
• Risk acceptance

STATE OF APPLICABILITY

• Information security policies
• Information security organization
• Human resources security
• Asset management
• Access control
• Cryptography
• Physical and environmental safety
• Operational safety
• Communication security
• Information security aspects of business continuity management
• Supplier relations
• Information security incident management
• Acquisition, development and maintenance of information systems
• Compliance

PROJECT MANAGEMENT

• Safety objectives
• Support
• Awareness campaign
• Monitoring, measurement, analysis and evaluation
• Security incident management
• Non-conformity and corrective action

PREPARATION FOR CERTIFICATION

• How to read standard requirements
• Tips for responding to the auditor

INTERNAL AUDIT AND MANAGEMENT REVIEW

• Internal audit methodology
• Preparing the audit plan
• Handling discrepancies
• Executive Review

‍