|
BS 7799 The Essentials of Information Security
Management
Course Description
Information security is critically important to both you and your customers.
BSI and the National Computing Center (NCC) have worked together to develop
a comprehensive two-day non-residential course that explores in depth all of
the business implications of the British Standard for Information Security
Management (BS 7799).
Course Structure
- Introduction to Information Security: The basics, myths and reality
- Business Needs: Commercial and legal implications
- Introduction to BS 7799: History, development, current situation
- Certification: The process, maintenance.
- Accreditation: Current developments, options.
- Designing and implementing a management system: Policy, Scope, Risk
Assessment, Risk Management, Statement of Applicability, Critical Success
Factors,
Benefits for Your Business
- Effective information security management throughout the organization
- Foolproof protection of your interests and those of your customers.
- Information security & the purpose of the standard
- Control objectives and controls
- The importance of the most significant controls
- The implications of implementing BS 7799 into an organization
- The implications of certification and commercial pressures
- Penalties for non-compliance
BS 7799 Information Security Management System Implementation
Course Description
Recent high profile information security breaches and the value of information
are highlighting the ever increasing need for organizations to protect their
information. An Information Security Management System (ISMS) is a
controlled approach to managing sensitive company information so that it
remains secure. It encompasses people, processes and IT systems.
Course Structure
- Determination of scope
- Identification of information assets
- Determination of the value of information assets & risk
- Determination of policy(ies) and the degree of assurance required from
controls
- Identification of control objective and controls
- Definition of polices, standards and procedures to implement the
- controls
Benefits for Your Business
- Both the objective and result of the course will be the construction of
an effective ISMS under the expert tutelage and guidance of a BSI tutor.
- Take the knowledge and skills imparted during this exercise and use them
to improve and protect your business
- The objective of this course is to provide delegates with the necessary
skills to implement an ISMS that is compliant with the requirements of ISO
17799 and meets the certification requirements of BS 7799 part 2.
ISO 9000 Lead Assessor Course
Course Description: The caliber of your lead auditor is crucial to the
performance of your audit team, and ultimately to the success of your
management system. This comprehensive five-day course provides hands-on
training to ensure that your lead auditor thoroughly understands the role
and acquires the expertise he/she needs to perform it effectively. Delegates
completing the course will be presented with IRCA/IATCA 's independently
accredited certificate for lead auditors.
Course Structure: Topics include:
- Introduction to quality
- ISO 9000 and ISO 19011 quality assurance and quality control
- Planning an audit
- The purpose of the Quality Manual
- The role of the checklists
- Organizing an opening meeting
- Performing an audit
- Organizing a closing meeting
- Recording non-conformities
- Auditing reports
- Evaluating corrective action
- Continuing assessment
Benefits to Your Business
- The knowledge that your management systems are being effectively audited
- The ability to do third party audits of your supply chain.
| 
