Apart from the course content of foundation level, following topics shall also be covered in the Lead Implementer training
- SO/IEC 27001 requirements along with implementation guidelines
- Understanding the guidelines of ISO/IEC 27003 for
- Company’s ISMS policy
- Framing scope statement
- Setting information security objectives and action plan for objectives
- Documentation requirements
- Design of controls and writing procedures
- Risk management according to ISO/IEC 31000:2009 Risk assessment, Risk analysis and risk treatment
- Incident management & Business continuity management
- Conducting internal audits and management review meeting
- Continual improvement of ISMS through corrective action and analysis
- Preparing for the ISO/IEC 27001:2013 audit
- Training shall include minimum three case studies where participants are given simulated environment on ensuring information security to work and give their responses
Write a public review