Description

ISO/IEC 27005 Risk Manager training allows participants to understand the process of developing, establishing, maintaining and improving an information security risk management framework based on the guidelines of the ISO/IEC 27005 standard.

Who is this training for ?

For whom ?

• Managers or consultants involved in or responsible for information security in an organization
• People responsible for managing information security risks
• Information security team members, IT professionals and privacy officers
• Individuals responsible for maintaining compliance with the information security requirements of the ISO/IEC 27001 standard in an organization
• Project managers, consultants or consultants seeking to master information security risk management

Prerequisites

Training objectives

• Explain the concepts and principles of risk management described by ISO/IEC 27005 and ISO 31000
• Establish, maintain and improve an information security risk management framework based on the ISO standard guidelines /IEC 27005
• Apply information security risk management processes based on ISO/IEC 27005 guidelines
• Plan and implement risk communication and consultation activities

Training program

• Day 1

  Introduction to ISO/IEC 27005 and risk management
• Day 2

  Risk assessment, risk treatment, risk communication and consultation based on ISO/IEC 27005
• Day 3

  Methods for risk recording and reporting, monitoring and review, and risk assessment