Information Security Management Professional (ISMP) based on IEC/ISO 27001 + exam

Course Overview

Information is crucial for the continuity and proper functioning of both individual organizations and the economies they fuel; this information must be protected against access by unauthorized people, protected against accidental or malicious modification or destruction and must be available when it is needed.

This module Information Security Management Professional based on ISO/IEC 27001 tests understanding of the organizational, physical and technical aspects of information security.

 

 

Target Audience

This module is intended for everyone who is involved in the implementation, evaluation, and reporting of an information security program, such as an Information Security Manager (ISM), Information Security Officer (ISO) or a Line Manager, Process Manager or Project Manager with security responsibilities. Basic knowledge of Information Security is recommended, for instance through the EXIN Information Security Foundation based on ISO/IEC 27001 certification.

Course Objectives

• Perspectives in Information Security: Business, Customer, Service Provider/Supplier (10%).
• Risk Management: Analysis, Controls, Remaining Risks (30%).
• Information Security Controls: Organizational, Technical, Physical (60%).

Course Content

Information security perspectives: the perspectives of the business, the customer, and the service provider
Risk Management: Analysis of the risks, choosing controls, dealing with remaining risks
Information security controls: Organizational, technical and physical controls

Course Prerequisites

ISF-EXIN, Information Security Foundation based on IEC/ISO 27001

Test Certification

After this course, one is able to take the Exin exam 'Information Security Management Professional, based on ISO/IEC 27001'. This exam is part of the course.