Organizations today recognize the importance of adopting a robust risk management programme. This course builds on what you already know about the framework specified in ISO/IEC 27001, which is now expanding to ISO/IEC 27005:2018.
This two-day training will equip you with practical guidance to manage information security risks. It will help you to review your existing risk management and ensure the measures are robust enough to reduce the identified risks. You will leave able to prioritize effectively and choose appropriate risk treatments within your organization.
How will I benefit?
- Identify benefits associated with using ISO/IEC 27005:2018, as part of an information security management system (ISMS)
- Understand the best practice risk management processes contained in ISO/IEC 27005:2018
- Develop processes for assessing and managing the risks related to your organization’s information assets
Who should attend?
Anyone who wants to learn about:
- Identifying and analysing information security risks
- How risks can be evaluated
- What treatments, controls and measures can be implemented in order to mitigate risks
- Ongoing governance and risk monitoring processes
The course is applicable to individuals from any size or type of organization who are currently involved in (or will be in the future) planning, implementing, maintaining, supervising or assessing information security, as part of an ISO/IEC 27001 ISMS or a standalone system.
Prerequisites
You should have a basic knowledge of ISO/IEC 27001 and ISO/IEC 27002, as well as an understanding of the key principles of an ISMS.
We also recommend that you have an awareness of generic risk assessments and a basic understanding of information security principles and terminology.
Some delegates on this course will have already attended our Information Security Management System (ISMS) Requirements of ISO 27001 or Information Security Management System (ISMS) Implementing ISO/IEC 27001 course.
We also recommend delegates have an understanding of the risk assessment approach currently employed in their organizations, should one exist.
What will I learn?
By the end of this course delegates will be able to:
- Explain concepts specific to information risk management, including terms and definitions
- Recognize typical information security risks faced by organizations
- Identify typical information security risk management concerns
- Communicate ISO/IEC 27005:2018 introduction, background, purpose, scope and structure
- Explain how ISO/IEC 27005:2018 integrates and interfaces with other standards, such as ISO/IEC 27001
- Implement the topics covered in ISO/IEC 27005:2018 within your organization
- Determine the value of the information assets under your control
- Evaluate threats to information assets
- Identify, analyze and evaluate information security risks
- Prioritize and choose appropriate risk treatments
What is included?
- Course notes
- On completion, you will be awarded an internationally recognized BSI Training Academy certificate.
Course Resources
COVID-19: Important information on classroom-based training courses
BSI is closely monitoring UK Government Advice regarding the safety of classroom-based training courses. In the event of a classroom-based course being deemed unsafe, your training booking will be automatically transferred to online delivery using our highly-interactive virtual classroom - Connected Learning Live.
If you have any questions regarding your booking, please contact info.nl@bsigroup.com or call +46 (0)707 401147.
Booking a course delivered via Connected Learning Live?
Take advantage of our exclusive offers, only available in July and August 2020*
Book a July or August Connected Learning Live course date and you’re entitled to unlock one of the following benefits:
- Option 1: Get 50% off a second delegate booking fee
Offer applicable to public courses delivered via Connected Learning Live in July and August 2020 only. Second delegate must attend the same course date
- Option 2: Save £500 on a BSI Diploma in Quality Management
Offer applicable to delegates that have booked a public course delivered via Connected Learning Live in July and August 2020 only
Contact our training team today to find out more and book your place. Call +46 (0)707 401147 or email info.nl@bsigroup.com
*Terms and conditions: Applies to all public BSI UK training courses, taking place in July and August 2020 via Connected Learning Live only. Call our training team on +46 (0)707 401147 or email info.nl@bsigroup.com for more information. Second delegate must attend the same course date as the first delegate. Moves, changes and cancellations are not permitted. Payment required or invoice issued at the time of bookings. This offer does not apply to BSI re-sellers or Cybersecurity and BRCGS courses. Offer is for new BSI UK training bookings only. Offer is not to be used in conjunction with any other offer. Offer subject to availability of training courses. Bookings are non-transferable. All other terms and conditions for training courses apply.
