Cyber security and requirements of the ISO/IEC 27001 standard

Course objectives

The objective of the training is to clarify the requirements of cyber security in accordance with Act no. 69/2018 Coll., and acquaintance with the requirements of the standard ISO / IEC 27001:2022.

Course content

Day 1: Information security according to the ISO / IEC 27001:2022 standard:

• What is information security
  • Cyber threat trends
  • IS assets and their valuation
  • Vulnerabilities and risks
  • Security requirements
• ISO / IEC 27001:2022 standard
  •  Contents
  •  Annex A
• Examples - Documentation
  • Information security policy
  •  Risk analysis
  • Risk elimination measures
• Discussion

Day 2: Law and Cyber Security:

• Act 69/2018
  • Competence of the authorities in the field of cyber security,
  • National Cyber Security Strategy and the Unified Cyber Security Information System,
  • Status and obligations of the basic service provider and digital service provider,
  • Organization and scope of CSIRTs,
  • Education and security awareness building,
  • Control mechanisms and sanctions.
• Decree no. 362/2018 laying down the content of security measures
  • Content and structure of documentation
  • Information classification and categorization of networks and information systems
  • Precautions
• Discussion
  •  Comparison of requirements for the creation of documentation according to ISO / IEC         27001:2022 and according to the Cyber Security Act

Designed for

• Internal Auditor
• Quality Manager
• IMS Manager

Additional information

* UTC +1 time zone (DE, BE, DK, NL, NO, SE, AT, ES, FR, IT, SI, SK, CZ, PL, HU, ...)