Kıbrıs Certified ISO 27002 Lead Manager Eğitimi

Why Should You Attend?

• Day 1: Introduction to ISO/IEC 27002
• Day 2: Information security roles and responsibilities, people controls, and physical controls
• Day 3: Information security assets, access controls, and protection of information systems and networks
• Day 4: Information security incident management and testing and monitoring of information security controls based on ISO/IEC 27002

Who Should Attend?

• Managers or consultants seeking to enhance their knowledge regarding the implementation of information security controls in an ISMS based on ISO/IEC 27001
• Individuals responsible for maintaining information security, compliance, risk, or governance in an organization
• IT professionals or consultants seeking to enhance their knowledge in information security
• Members of an ISMS implementation or information security team

• Explain the fundamental concepts of information security, cybersecurity, and privacy based on ISO/IEC 27002
• Acknowledge the relationship between ISO/IEC 27001, ISO/IEC 27002, and other standards and regulatory frameworks
• Interpret the ISO/IEC 27002 information security controls in the specific context of an organization
• Support an organization in effectively determining, implementing, and managing information security controls based on ISO/IEC 27002
• Explain the approaches and techniques used for the implementation and effective management of information security controls

• The training course integrates both theory and practice by guidance and practical examples for the implementation and management of information security controls.
• The training course contains essay-type exercises and multiple-choice quizzes, some of which are scenario-based.
• Participants are encouraged to communicate and discuss with each other while partaking in exercises and quizzes.
• The structure of quizzes is similar to that of the certification exam.

• Domain 1: Fundamental principles and concepts of information security, cybersecurity, and privacy
• Domain 2: Information security management system (ISMS) and initiation of ISO/IEC 27002 information security controls implementation
• Domain 3: Implementation and management of organizational and people controls based on ISO/IEC 27002
• Domain 4: Implementation and management of physical and technological controls based on ISO/IEC 27002
• Domain 5: Performance measurement, testing, and monitoring of ISO/IEC 27002 information security controls