PROGRAM OVERVIEW
Information security is the practice of defending information of an organization from unauthorized access, use, disclosure, disruption, modification, perusal, inspection, recording or destruction. This 2-day course describes the concept of Information Security Management Systems (ISMS), establishing, implementing, reviewing, and continually improving the ISMS within an organization. Training methods shall be in the form of lectures, discussions and workshops. It is beneficial to organization in planning to implement ISMS against
ISO/IEC 27001 standard to ensure compliance with the standard requirements.

OBJECTIVES
• To understand the importance and benefits of ISMS
• To understand the requirements of ISO/IEC 27001 standard and its application
• To gain knowledge on how to implement ISMS including the required controls in Annex A
• To explain how to establish, implement, maintain, review and to continually improve ISMS according to
ISO/IEC 27001
• To explain the basic concept of ISMS Risk Management