ISO 27001 Foundational

Description

ISO 27001 is popular framework organizations use to establish mature cybersecurity programs.

Hi, I’m Dr. Bill Souza, the CEO and Founder of Executive Cyber Education. In this ISO 27001 Foundational Course, you will learn to establish, implement, maintain, and continually improve your organization’s Information Security System.

As we consider “information” a critical asset to any organization, if not the most important asset, since 75% of market capitalization is now driven by intangible assets, according to a 2019 Ponemon study. So, as with any critical asset, it requires protection.

There are several threats that every organization must focus on and protect against, so you will need a system. Here, I will teach you the fundamental concepts of the ISO 27001 standard for you to build a comprehensive Information Security Management System or ISMS. You will gain the necessary skills to establish, implement, maintain, and continually improve your organization’s Information Security program, so welcome and let’s get started.

Also part of the ISO 27000 family, you’ll find some good information in these documents. Although our focus will be on ISO 27001.

ISO/IEC 27001: defines requirements for an ISMS

ISO/IEC 27002: guidelines to implement Annex A controls

ISO/IEC 27000: information security overview, terms, and definitions

ISO/IEC 27003: ISMS implementation guidance

ISO/IEC 27004: ISM monitoring and measure guidance

ISO/IEC 27005: risk management guidance

ISO/IEC 27006: requirements for audit and certification

ISO/IEC 27007: guidelines for auditing ISMS

More than a dozen standards exist in the ISO/IEC 27000 family.

Who this course is for:

• This course if for cybersecurity analysts, compliance professionals, cyber risk experts, as well as cybersecurity management and executives.