At this moment, you just officially became our latest

Document Outline

• Table Of Contents
• Welcome To The SkillFront
• Become A Bit Better Than You, Everyday
• Why Does ISO/IEC 27001 Matter?
• A Brief History
  • The Structure Of ISO/IEC 27001
  • ISMS Scope and Statement of Applicability (SoA)
  • Mandatory Requirements for Organizational ISO 27001 Certification
• ISMS Scope (Clause 4.3)
• Information Security Policy (Clause 5.2)
• Information Risk Assessment Process (Clause 6.1.2)
• Information Risk Treatment Process (Clause 6.1.3)
• Information Security Objectives (Clause 6.2)
• Evidence Of The Competence Of The People Working In Information Security (Clause 7.2)
• Other ISMS-related Documents Deemed Necessary By The Organization (Clause 7.5.1b)
• Operational Planning And Control Documents (Clause 8.1)
• The Results Of The Information Risk Assessments (Clause 8.2)
• The Decisions Regarding Information Risk Treatment (Clause 8.3)
• Evidence Of The Monitoring And Measurement Of Information Security (Clause 9.1)
• The ISMS Internal Audit Program And The Results Of Audits Conducted (Clause 9.2)
• Evidence Of Top Management Reviews Of The ISMS (Clause 9.3)
• Evidence Of Nonconformities Identified And Corrective Actions Arising (Clause 10.1)
• Various Others
• Certification
  • ISO 27001 Audit Programs
• Success Factors For Practical Implementation
  • ISO 27001 Step-By-Step Implementation Guide
• Step 1. Obtain Management Support
• Step 2. Treat It As A Project
• Step 3. Define The Scope
• Step 4. Write An Information Security Policy
• Step 5. Define The Risk Assessment Methodology
• Step 6. Perform The Risk Assessment & Risk Treatment
• Step 7. Write The Statement Of Applicability
• Step 8. Write The Risk Treatment Plan
• Step 9. Define How To Measure The Effectiveness Of Controls
• Step 10. Implement The Controls & Mandatory Procedures
• Step 11. Implement Training And Awareness Programs
• Step 12. Operate The ISMS
• Step 13. Monitor The ISMS
• Step 14. Internal Audit
• Step 15. Management Review
• Step 16. Corrective And Preventive Actions
  • ISO 27001 - Roles And Responsibility In Organizations
• Why Understanding Roles is Critical to the Security Program?
• Five Typical Roles and Responsibilities
• 1. Security Leadership
• 2. Security Risk Management
• 3. Internal Audit
• 4. Control Owners
• 5. All Employees
  • Next Steps For The Pursuit Of Growth
  • Thanks For Learning With The SkillFront