Learn how to implement an information security management system

This course is designed to help managers implement an information security management system (ISMS). It will help managers and employees understand their role and the process of implementing an ISMS.

• This course is designed to help ISMS managers who wish to implement an ISMS system
• Managers and employees who have an active role in implementing ISO/IEC 27001:2013/2022
• Those who have been involved with an ISMS system and wish to move into Information Security Management consultants
• You will have some experience working in information security and a knowledge of ISO/IEC 27001:2013

• The background to Information Security
• How to define the scope of an ISMS
• The identification of assets relative to the scope
• Applying values to the above assets
• Determining the risk to the assets and their potential impact
• Identifying the appropriate controls
• Determine and produce applicable policies and procedures
• Identifying awareness training
• Certification process

Knowledge of ISO 27001 and ISO 27002 information security management systems. It is recommended that participants attend either the Introduction to ISO 27001 course or the ISO 27001 Lead Auditor course beforehand in order to acquire this knowledge.

Delegate Workbook, ISMS Policy Manual, Course Certificate

Three days

F2F and Virtual (VILT) classroom delivery

With LRQA, you can access a wide range of courses to help you further your career and bring improvements to the management systems in your organisation. With many learning styles to choose from, our training courses can help you develop and reach your next level.  Find out more about our Training Courses from LRQA.