The course Information Security offers you the chance to break into a sector in steady growth y high demand for labour. In a world where the information is one of the most valuable assets, to ensure its protection has become a priority for organisations of all kinds. This course offers you a in-depth knowledge of the ISO 27001 standard and how to implement an Information Security Management System (ISMS). You will learn how to manage risks, to establish security policies y to promote a culture of safety within your organisation. You will also develop skills in audit and certification, which are essential for ensuring the regulatory compliance and the data integrity. The online format allows you to access this valuable knowledge from anywhere, tailoring it to your needs. On completion of this course, you will be ready to tackle today’s challenges in information security and become a an expert in the field that companies are looking for.
ISO 27001 Audit: Information Security
Quality
8 pm
Introduction
Objectives
-
To understand the fundamentals and development of the ISO 27001 standard.
-
Identify the key concepts such as confidentiality, integrity and availability.
-
Analysing the general requirements of an ISMS according to the ISO 27001.
-
Assess risks y to define information security policies.
-
Setting safety targets y plan to achieve them.
-
Promoting a culture of safety y assign roles within the organisation.
-
Implement controls y manage incidents within the ISMS.
Table of Contents
TEACHING UNIT 1. Fundamentals of ISO 27001
The origins and development of the ISO 27001 standard
The importance of information security in organisations
High-Level Structure (HLS) of ISO standards
Relationship between ISO 27001 and other related ISO standards (ISO 27002, ISO 22301, etc.)
Key concepts: Confidentiality, integrity and availability
TEACHING UNIT 2. Information Security Management Systems (ISMS) and the use of ISO 27001
Definition and scope of the ISMS
General requirements for the ISMS in accordance with ISO 27001
Information security policies
Asset definition and management within the ISMS
Risk management: identification, assessment and treatment
TEACHING UNIT 3. Context and planning of the ISMS
Identifying the organisation’s internal and external context
Stakeholders and applicable requirements
Analysis of risks and opportunities
Setting information security objectives
Planning to achieve the set objectives
TEACHING UNIT 4. Leadership and commitment within the ISMS
The role and responsibilities of senior management within the ISMS
Establishment of an information security policy
Allocation of roles and responsibilities in information security
Promoting a culture of safety within the organisation
TEACHING UNIT 5. ISMS Support and Resources
Resource requirements for the implementation of the ISMS
Competence and training of the staff involved
Internal and external communication within the ISMS
ISMS Documentation: Types of documents and requirements
Control of documented information
TEACHING UNIT 6. Operation of the SGSI
Planning and Operational Control in Information Security
Implementation of controls in accordance with Annex A of the ISO 27001 standard
Information Security Incident Management
Incident response and recovery plans
Assessment of suppliers and external services
TEACHING UNIT 7. Assessment of the SGSI’s performance
Monitoring and measurement of the ISMS
Internal audits: Planning, implementation and results
Key performance indicators (KPIs) in information security
Analysis of non-conformities and corrective actions
Management review of the ISMS
TEACHING UNIT 8. ISO 27001 Certification
Certification process: Stages and requirements
Roles and responsibilities during the external audit
The relationship between internal audit and certification
Maintenance and renewal of the ISO 27001 certificate
TEACHING UNIT 9. Technical tools for auditing the ISMS
Risk management and regulatory compliance software
Techniques for carrying out penetration testing (pentesting)
Vulnerability assessment within the ISMS environment
Use of log monitoring and analysis tools
Automation in information security auditing
TEACHING UNIT 10. How to carry out an ISO 27001 audit
Introduction to Auditing
Audit Planning
Conducting the Audit
Assessment and Analysis of the 27001 audit
Audit Report
Review and approval of the report
More related courses
Corporate
40 hours
Management under the EFQM model. Framework, REDER and implementation
View course →
Corporate
40 hours
Integrated management systems for quality, the environment, safety and health. ISO 9001, ISO 14001, ISO 45001
View course →Your questions answered
Why choose Educa.Pro?
Educa.Pro enables organisations to centralise training management, personalise learning and gain clear insights into the impact of training programmes. Thanks to its AI-powered technology, organisations can optimise their learning strategies, enhance talent development and make data-driven decisions.
Can the courses be taken at your own pace?
Yes. Most of the courses on Educa.Pro are self-paced and on-demand, allowing users to progress at their own pace without missing out on progress tracking or assessments, which makes it easier to fit them around work or study commitments.
What levels of security and compliance does the platform offer?
Educa.Pro complies with security standards designed to protect user and organisational data. Furthermore, it supports the traceability of certifications, digital signatures and the management of assessments, thereby ensuring regulatory and legal compliance in both educational and corporate environments.
What support and guidance does Educa.Pro offer?
The Educa.Pro team offers comprehensive support throughout implementation, roll-out and adoption, ensuring that organisations get the most out of the platform and achieve measurable results from day one.