ISO/IEC 27001 Bilgi Güvenliği Yönetim Sistemi Uygulama Training

In today’s digital landscape, information security breaches have become a major concern for organizations of all sizes.
The value of information and the consequences of data compromise highlight the need for a structured approach to information protection.

The Information Security Management System (ISMS), based on the ISO/IEC 27001 standard, provides a systematic, risk-based framework that integrates people, processes, and technology to safeguard organizational information.

This course aims to equip participants with the knowledge and skills required to implement, manage, and maintain an ISO/IEC 27001-compliant ISMS.
It also introduces practical applications aligned with ISO/IEC 27002 controls and certification best practices.

There are no prerequisites for this course.

• Information Security Managers and Specialists

• IT Managers and System Administrators

• Auditors and Compliance Officers

• Professionals preparing for ISO/IEC 27001 certification

• Risk Management and Internal Audit Teams

By the end of this training, participants will be able to:

• Understand how to establish an effective Information Security Management System (ISMS) within their organization.

• Apply the requirements of ISO/IEC 27001 and implement controls based on ISO/IEC 27002.

• Develop a customized ISMS implementation plan suitable for their corporate environment.

Introduction to Information Security and ISO/IEC 27001

• History and evolution of information security

• Overview of the ISO/IEC 27000 family of standards

• Structure, requirements, and scope of ISO/IEC 27001

Defining the ISMS Scope and Policy

• Establishing an information security policy

• Defining ISMS scope and boundaries

• Stakeholder and process analysis

Asset Management and Valuation

• Identifying information assets

• Asset valuation techniques

• Assessing risks and potential impacts

Risk Management and Controls

• Risk analysis and evaluation methods

• Selecting control objectives and controls

• Applying ISO/IEC 27002 control framework

Documentation and Implementation

• Developing policies, standards, and procedures

• Documentation requirements for ISMS

• Maintaining ISMS documentation

Certification and Audit Process

• Steps in the certification audit process

• Internal audit and continual improvement

• Working with certification bodies

ISMS Implementation Project Plan

• Planning implementation phases

• Assigning roles, responsibilities, and timelines

• Monitoring and evaluating ISMS performance