Implementation of the Information Security Management System in accordance with the ISO/IEC 27001:2022 standard

ISO 27001:2022 course audience

The course is focused on:

• IT and IT security specialists
• Managers at various levels responsible for information security
• Information security management experts
• Anyone who wants to deepen their knowledge in the field of information security

Course composition

Chapter 1: Introduction to Information Security Standards and ISMS Implementation

• Introduction to ISO 27001, ISO 27002 and ISO 27003
• Overview of Appendix A controls
• Task and discussion

Chapter 2: Using other frameworks

• Applying NIST in the context of ISO 27001
• Using IT-Grundschutz and GDPR in the context of ISO 27001
• Task and discussion

Section 3: ISMS Implementation Practices

• Using the PDCA cycle and alternative approaches
• Project initiation and definition of ISMS goals
• Establishing a governance structure and risk management process
• Task and discussion

Section 4: Implementing Annex A controls according to ISO 27002:2022

• Implementation of organizational, personal, physical and technological controls
• Task and discussion

Chapter 5: Preparing for Certification

• Self-check and non-conformance analysis
• Certification process
• Task and discussion