Networking and information technology have changed the way people, businesses and organizations interact. With globalization and the ongoing digitization, Information has become an asset that is critical for the success of most organizations.However information assets are exposed to various risks that threaten their confidentiality, integrity and availability. The most recent ransomware attacks are just one example of threats that have the ability to disrupt an organization in its entirety. Therefore information assets require adequate protection.

ISO 27001 is the global standard for information security management systems (ISMS). It provides detailed guidance on how to establish, implement, operate and maintain an ISMS with the goal of protecting an organization's information assets.

In this course you will learn about the importance of information security and the ISO 27000 family of standards, including ISO 27000, ISO27001, and ISO 27005. This course provides you with everything you need to know to establish and implement your own information security management system, including information security governance, risk management and compliance. The course will also help you to understand how organizations use management systems to achieve their objectives.

Implementation Resources

Over the course of the next weeks and months, templates for all mandatory documents of ISO27001, including useful implementation guidelines are going to be added as resources to this course.

Currently available

• ISO 27001 Control Mapping (ISO 27002:2022, NISTSP800-53, NIST Cybersecurity Framework, CIS Critical Security Controls)

• ISO 27001 Implementation Project Plan (Gantt chart)

• ISO 19011 Audit Workflow

• ISO 27000 Mind Map

• List of ISO 27000 Family of Standards

What are you waiting for? Stay ahead of internal and external threats and start learning about ISO 27001 today.