ISO 27002 Lead Implementer Training | ISO 27002 Training in Hong Kong

ISO 27002 Lead Implementer Training Course Outline

Module 1: Introduction to ISO 27002

• What is Information Security?
• Why is Information Security Needed?
• How to Establish Security Requirements
• Assessing Security Risks
• Selecting Controls
• Information Security Starting Point
• Critical Success Factors
• Lifecycle Considerations
• Difference between the ISO 27001 and 27002
• Relation between the ISO 27001 and 27002

Module 2: Scope, Terms and Definitions

• Scope
• Terms and Definitions

Module 3: Structure of ISO 27002 Standard

• 14 Clauses of ISO 27002
• Security Categories
  • Control
  • Implementation Guidance
  • Other Information

Module 4: Risk Assessment and Treatment

• Assessing Security Risks
• Treating Security Risks

Module 5: Audit Plan and Process

• Audit Plan
• Preparing for an Audit
• Audit Process
  • Planning
  • Notification
  • Opening Meeting
  • Fieldwork
  • Report Drafting
  • Management Response
  • Closing Meeting
  • Final Audit Report Distribution
  • Follow-Up

Module 6: Internal Auditor

• Understanding an Internal Auditor (IA) 
• Internal Auditing Process 
• Requirements for Internal Auditors
• Internal Auditor Vs External Auditor 
• Benefits of an Internal Auditor (IA) 

Module 7: ISMS Audit

• Introduction
• Principles 
• Audit Management
• Auditing Process
• Competence and Evaluation of Auditors 

Module 8: Cybersecurity Auditing

• What is Cybersecurity Audit?
• How It Helps Organisation? 
• Cybersecurity and the Role of Internal Audit 
  • Cyber Risk and Internal Audit
  • Third Line of Defence
  • Cybersecurity Assessment Framework

Module 9: Information Security Audit

• What is IT Security Audit?
• Benefits 
• Types
  • Approach Based
  • Methodology Based
• Importance
• How to Conduct an IT Security Audit?
• Roles and Responsibilities of Information Security Auditor
  • Basic Duties List
  • Roles and Responsibilities on the Job

Module 10: Information Security in Project Management

• Project Management
• Attributes Table
• Purpose of Control 5.8
• Meet Requirements 
• Differences Between ISO 27002:2013 and ISO 27002:2022

Module 11: Components of Information Security

• Confidentiality
• Integrity 
• Availability
• Authenticity
• Non-Repudiation 

Module 12: Information Security Risk Management (ISRM)

• Introduction
• Stages
• Ownership

Module 13: Control and Compliance

• Security Controls
• Importance of Compliance
• Legal Requirements for Information Security 
• Information Technology Compliance
  • Improved Security
  • Minimised Losses
  • Increased Control
  • Maintained Trust
• Information Security Compliance Standards 

Module 14: Management Responsibilities

• Control 5.4 Management Responsibilities
• What is an Information Security Policy?
• Attributes Table
• Purpose of Control 5.4 
• Implementation Guidelines