Module 1 - Information Security

• The Importance of Being Informed
• Globally Connected
• More Ado About Risks
• Decoding the Secret of Information Security Management
• Management and Awareness
• Legislation, Regulation and Governance

Module 2 - Information Security 27001 Standards

• ISO/IEC Standardisation
• Overview
• Evolution of the ISO/IEC 27000 
• The Weakest Link 
• Overview of ISO/IEC 27001: 2013 
• ISMS Audience
• Processes 
• ISMS Stages

Module 3 - ISMS Business Context

• Organisational Context
• Needs and Expectations 
• ISMS Scope
• Interested Parties
• Requirements Relevant to the ISMS 
• Gathering Requirements Relevant to the ISMS

Module 4 - ISMS Scope

• ISMS Scope 
• What to Consider and What to Include 
• Object of ISMS Scope 
• Defining the ISMS Scope 
• Scope Example 
• External and Internal Connections

Module 5 - ISMS Risks

• The Importance of Risk and Opportunity
• Risk Management Process 
• Ongoing Reassessment of Risk 

Module 6 - ISMS Leadership and Support

• Management Policy
• Leadership 
• Roles and Responsibilities 
• Resources 
• Awareness

Module 7 - Controls to Modify the Risks

• Determining the Controls 
• System of Controls 
• Policies and Procedures 
• Sector-Specific Controls

Module 8 - ISMS Operations

• Operational ISMS Procedures
• Ongoing Risks Management
• Operational Threats
• Operational Processes
• Incident Management
• ISMS Availability and Business Continuity

Module 9 - Performance Evaluation

• Performance, Change and Improvement
• Monitoring and Operational Reviews
• ISMS Measurements Programme
• Ongoing Risk Management
• ISMS Audits
• Management Reviews of the ISMS
• Awareness and Communications

Module 10 - Improvements to the ISMS

• Continual Improvement
• Conformance and Nonconformance
• Making Improvements

Module 11 - Auditing

• Audit Process
• Nonconformities
• Audit Report
• Surveillance Audits 
• Recertification 
• Audit Trails 
• Competence