Cyber Cultura course
ISO 27001/2: Compliance Practices and Controls
ISO/IEC 27001 requirements and 27002 controls, 2022 editions.
Builds knowledge and skills on the information security standards ISO/IEC 27001 and 27002, published in 2022, widely recognized and adopted by organizations worldwide to establish, implement, maintain and improve information security management systems (ISMS).
- Workload
- 15 hours
- Format
- Online or in-company
- Investment
- On request
We’ll reply with dates, format and investment.
Who it’s for
- Professionals who implement, maintain or audit an ISMS.
- Security and IT managers preparing their company for certification.
- GRC consultants and analysts.
What you’ll develop
- Understand the requirements of 27001: context, leadership, risks, objectives and improvement.
- Select and justify 27002 controls by risk and scope, with a robust Statement of Applicability.
- Produce and maintain the documentation: policies, standards, procedures and records.
- Integrate internal audits and indicators.
- Prepare for audits and assessments and demonstrate compliance.
Syllabus
15 hours
01Introduction and objectives
02General information security concepts
- Information Security and Cybersecurity
- Confidentiality, Integrity and Availability
- Information Security and Cyber Risks
- Information Security Standards and Frameworks
03Overview of ISO/IEC 27001 and 27002
- Structure of ISO/IEC 27001
- Structure of ISO/IEC 27002
04ISO/IEC 27001 compliance
- Context of the Organization
- Leadership
- Planning
- Support
- Operation
- Performance Evaluation
- Improvement
05ISO/IEC 27001 and 27002 controls
- Organizational Controls
- People Controls
- Physical Controls
- Technological Controls
06Practical example and templates
What the course includes
- Practical example
- Document templates
For your team
This course is also offered in-company, on-site or remote, as a private class for your company.
Cyber Cultura course
ISO 27001/2: Compliance Practices and Controls
We’ll reply with dates, format and investment.
cyber@cyberconsulting.com.br