Course content

• Introduction to information security management systems
• Methods used in information security management systems
• Defining risks and rules to prevent information leakage
• What is information security
  • Trends in cyber threats
  • IS assets and their valuation
  • Vulnerabilities and risks
  • Security requirements
• Standard ISO/IEC 27001:2022
  • Content of the revised standard
  • Main changes between ISO/IEC 27001:2013 and ISO/IEC 27001:2022
  • Annex A (Organizational controls, people controls, physical controls, technological controls)
    • Introduction of 17 new security measures
    • 16 security measures were removed              (duplication or alignment with other measures)
• Examples - Documentation
  • Information security policy
  • Risk analysis  
  • Measures to eliminate risks
• Discussion

Designed for

• Internal Auditor

---

Additional information

Training Schedule - Open Public Online Term
Testing the training connection	from 07:45 *
Training program	08:00 - 12:00
Lunch break	12:00 - 12:30
Training program	12:30 - 14:00
Processing a case study / test	after 14:00

* UTC +1 time zone (DE, BE, DK, NL, NO, SE, AT, ES, FR, IT, SI, SK, CZ, PL, HU, ...)