COURSE OVERVIEW

Course Description

This practical and highly-interactive course includes real-life case studies and exercises where participants will be engaged in a series of interactive small groups and class workshops.

 

This course is designed to provide participants with a detailed and up-to-date overview of ISO 27001 Risk Assessment. It covers the importance, standard key concepts and principles of risk management; the organizational context and the internal and external factors affecting information security; the roles and responsibilities for risk assessment and the importance of leadership commitment and support; the risk assessment framework, asset identification and valuation; and the common threats to information security and vulnerabilities in information systems.

 

During this interactive course, participants will learn the risk identification techniques, risk assessment methodologies and risk assessment tools; the risk analysis process, risk impact assessment, risk likelihood assessment, risk evaluation criteria and risk prioritization; the organization’s risk appetite and tolerance; aligning the assessment with risk appetite; the risk treatment options and developing a risk treatment plan; selecting information security controls, applying residual risks management and integrating risk treatment with ISMS; establishing a process for ongoing risk monitoring and reviewing and updating the risk assessment regularly; the performance measurement and metrics; the internal and external audits; and the continual improvement practices. 

link to course overview PDF

TRAINING METHODOLOGY

This interactive training course includes the following training methodologies:

30 % Lectures
20 % Practical Workshops & Work Presentations
30 % Hands-on Practical Exercises & Case Studies
20 % Simulators (Hardware & Software) & Videos

In an unlikely event, the course instructor may modify the above training methodology for technical reasons.

VIRTUAL TRAINING (IF APPLICABLE)

If this course is delivered online as a Virtual Training, the following limitations will be applicable:

Certificates	:	Only soft copy certificates will be issued
Training Materials	:	Only soft copy materials will be issued
Training Methodology	:	80% theory, 20% practical
Training Program	:	4 hours per day, from 09:30 to 13:30