Mastering the implementation and management of an ISMS

Course overview

This 3-day intensive course enables the participants to develop an expertise to support an organisation in implementing and managing an ISMS as specified in ISO/IEC 27001:2005. Participants will also master the best practices for implementing information security controls from the eleven areas of ISO/IEC 27002:2005.

This training is consistent with the good practices of project management established by the Project Management Institute (PMI) and ISO 10006:2003 (Quality Management Systems - Guidelines for Quality Management in Projects). This training is fully compatible with ISO/IEC 27003:2009 (Guidelines for the Implementation of an ISMS), ISO/IEC 27004:2009 (Measurement of Information Security) and ISO/IEC 27005:2008 (Risk Management in Information Security).

Who should participate?

This masterclass is ideal for anyone involved in or responsible for implementing an Information Security Management System (ISMS) that conforms with ISO27001:

• Business managers
• Compliance managers
• IT managers
• Quality managers
• Project managers
• Risk managers
• Information security managers
• BS7799 lead auditors
• IT and other staff, including HR, legal and business users.
  

Learning objectives

During this ISO27001 Certified ISMS Lead Implementer Masterclass, you will learn:
The importance of securing senior management commitment, and how to sell the project effectively

• The role and structure of an information security policy
• How to determine the scope of your ISMS
• How to structure and manage your ISO27001 project
• How to allocate roles and responsibilities with your ISO27001 implementation
• How to identify information assets and information asset ownership
• How to carry out the information security risk assessment (the core competence of information
• security management)
• How to identify threats, vulnerabilities and impacts
• The benefits of, and key issues in selecting a risk assessment tool
• The importance of an effective communication strategy
• Writing policies and producing other critical documentation
• The importance of staff and general awareness training
• The key elements of management review
• How to manage and drive continual improvement
• How to prepare for your ISO27001 certification audit
• Key issues in ensuring that you pass the audit first time!

The effective combination of formal training and practical exercises, using practical business examples and case studies, accelerates your ISO27001 project and will save you work, cut time requirements and eliminate 'first time' trial and error.

The importance of Certification

This course prepares delegates for an examination which is taken on the last day of a three-day training programme. Successful candidates will be awarded the ISO27001 ISMS Lead Implementer Certificate issued by the exam body, gasq and approved by the International Board for IT Governance Qualifications.

Qualifications that are certified by accredited and respected organisations are becoming an essential requirement of any IT governance professional. With an ever increasing demand for information security staff, employers offer enhanced career opportunities to candidates who have certified qualifications and relevant experience.

End of course exam

Completion of the training course and successfully passing of the 40 question classroom based exam, will earn the delegate an official GASQ, IBITGQ ISO27001 Certified ISMS Lead Implementer Masterclass certificate as well as 24 CPD/CPE credits.

At the end of Day 3, IBITGQ will invigilate a ninety (90) minute exam, which consists of 40 multiple choice questions; with a pass mark of 65%. Official certificates are then mailed directly to the successful delegates.

The exam fee of £200+vat is included in the course price, and the course is structured and delivered in such a way as to maximise our delegates' chance of passing the exam.

Upcoming Public ISO 27001 Lead Implementer Course

• July 2011
• Sept 2011
• Oct 2011
• Nov 2011
• Jan 2012
• Feb 2012
• Mar 2012

Course Includes

• Our package includes lunch and refreshments, and full course materials.
• This Lead Implementer class fits well with the CISSP and SSCP CPE programme and is worth 24 credits, making attendance on this course a career-enhancing move for security professionals. It is also worth 24 hours of Continuing Professional Education for all other professional CPE programs.
• 90 minutes written examination and certificate.

Course Venue

London or Manchester

You might also want to know our ISO27001 Lead Auditor Qualification Course

ISO27001 Lead Auditor

Discount on In-house Training

Onsite training for individual organisations are also provided to make the most of your training budget. We can run onsite courses exclusive to your organisation regardless of location. Minimum of 4 course participants are required for In-House course training.