Certified ISO 27001:2013 Lead Implementer

1. Overview of ISO 27001

• ISO 27001 Mission & Objectives
• ISO 27001 methodology
• ISO 27001 focus areas
• Review and monitor
• Improvement and maintenance
• ISO 27001 Clauses

2. Information Security Management Systems (ISMS)

• What is an Information Security Management System?
• Making Project Plan for ISMS ISO 27001
• Governance frameworks
• ISMS principles, Concepts & Benefits.
• Overview to management systems
• The PDCA cycle

3. Introduction to Auditing

• Defining & planning auditing
• Types of audit
• Techniques and principles
• Phases of audit

4. Performing ISO 27001 Audits

• Drafting audit reports
• Data Analysis
• Procedures of Audits
• Reviewing documents and reports
• Validating reports
• Designing and adding findings
• Planning, organizing, and prioritizing
• Factors that affect the reliability of audit findings

5. Internal Auditor

• Roles and responsibilities
• Record review activities
• Internal auditor checklist
• Communication between departments
• Drafting reports and test plans

6. Risk Management

• Analysing and evaluating risks
• Managing risk approaches  

7. Risk Assessment and the Statement of Applicability (SOA)

• Risk assessment summary
• Conducting risk assessments
• Methodology & Implementation
• Making plan & implementation
• ISMS risk assessment report
• The Statement of Applicability (SOA)
• Threats and vulnerabilities

8. Implementing an ISMS in an Organisation

• Apply the frameworks
• Design writing procedures and controls
• Implementing the controls
• Training and awareness program
• Management’s role
• Impediments and aids to success
• Responsibilities of employees

9. Security Controls and Incident Management

• Management of incidents and operations
• Physical and environmental security
• Operations
• Communications
• Managing incidents
• Confidentiality and security of information in an ISMS
• Control and act
• Managing records
• Monitoring controls
• Indicating performance
• Developing a matrix according to ISO 27001
• Internal auditing