Loading...
Information Security Risks Management (ISRM) according to ISO/IEC 27001:2022 and ISO/IEC 27002:2022
Description:
  • Ability to understand the process approach in Information Security Risk Management (ISRM)
  • Ability to understand the basic principles and process of the ISRM according to the ISO 27001 requirements, ISO 27002 and ISO 27005 guidelines
  • Ability to establish and maintain Information Security Risk criteria and methods
  • Ability to identify the IS requirements of interested parties, threads and vulnerabilities
  • Ability to perform the IS Risk Assessment and Treatment according to the ISO 27001 requirements
  • Ability to verify the effectiveness of the implemented measures
Previous skills/knowledge: Basic knowledge of management systems.
Authorized Partners:

Teaching requirements: Trainer to be a qualified ISO9001/QMS and/or other MS with knowledge in ISMS, Risk Management and/or ISO 27001 Lead Auditor (Recommended)
Objectives to achieve: To get the necessary knowledge and skills to:

  • Be able to understand the process approach in Information Security Risk Management
  • Be able to understand the ISO 27001 standard requirements regarding ISRM
  • Be able to perform the IS Risk Assessment and Treatment
  • Be able to formulate Risk Treatment Plan and effectively manage Information Security Risks
Authorized Partners: