Eesmärk:

Infoturbe juhtimissüsteemi rakendamise koolitus võimaldab osalejatel saada põhiteadmised ja oskused infoturbe juhtimissüsteemi (Information Security Management System - ISMS) väljatöötamiseks ja rakendamiseks vastavalt rahvusvahelisele ISO/IEC 27001 standardile. Osalejad saavad hea ülevaate juhtimissüsteemi planeerimisest ning vastavate protsesside juurutamisest. Läbi praktiliste harjutuste ja juhtumianalüüside omandavad osalejad kogemuse infoturbe edukaks juhtimiseks.
Koolitusele järgneval päeval on võimalik lisatasu eest sooritada rahvusvaheline sertifikaadieksam (inglise keeles).

Sihtgrupp:

• Asutuste ja ettevõtete infoturbe juhid, IT juhid, keskastme juhid
• Konsultandid, kellel vaja läbi viia infoturbe juhtimissüsteemi implementeerimist
• IT üksuse töötajad, infoturbe projektijuhid, vastavuskontrolli töötajad
• IT teenusepakkujad, turbe eest vastutavad töötajad, kvaliteedikontrolli töötajad

Eeldused:

Soovitavalt varasem praktiline kokkupuude infoturbega või auditeerimisega.

Teemad:

Day 1
Introduction to Information Security Management System (ISMS) concepts as required by ISO/IEC 27001; initiating an ISMS
Introduction to the management systems and the process approach
Presentation of the ISO 27000 family standards and regulatory framework
Fundamental principles of Information Security
Preliminary analysis and determining the level of maturity based on ISO 21827
Writing a business case and a project plan for the implementation of an ISMS
DAY 2
Planning the implementation of an ISMS based on ISO/IEC 27001
Defining the scope of an ISMS
Drafting an ISMS and Information Security policies
Selection of the approach and methodology for risk assessment
Risk management: identification, analysis and treatment of risk (based on ISO 27005)
Drafting the statement of applicability
DAY 3
Implementing an ISMS based on ISO/IEC 27001
Implementation of a document management framework
Design of and implementation of controls
Information Security training, awareness and communication program
Incident management (drawing on guidance from ISO 27035)
Operations management of an ISMS
DAY 4
Control, monitor and measure an ISMS and the certification audit of the ISMS in accordance with ISO/IEC 27001
Monitoring the ISMS controls
Development of metrics, performance indicators and dashboards in accordance with ISO 27004
ISO/IEC 27001 internal audit
Management review of an ISMS
Implementation of a continual improvement program
Preparing for an ISO/IEC 27001 certification audit
DAY 5
Certification Exam

Õpiväljundid:

• To understand the implementation of an ISMS
• To gain a comprehensive understanding of the concepts, approaches, standards, methods and techniques related to an ISMS
• To acquire the necessary expertise to support an organization in implementing, managing and maintaining an ISMS
• To acquire the necessary expertise to manage a team implementing ISO/IEC 27001

Tunnistus:

TalTech tunnistus

Keel:

Inglise

Registreerumise tähtaeg:

10.04.2025 23:59

Ajakava:

Lisad:

• iso-iec-27001-lead-implementer-en.pdf