Information Security Management

Section One: Information Security Management – An Overview

• IT Risk Management 
• Categorising Physical and Electronic Risk 
• IT and Networks 
• Computer Systems Design 
• Legal and Regulatory Considerations 
• Information, Business, and Risk – Case Study

Section Two: Information Security Management

• Ensuring Information Security 
• Confidentiality 
• Integrity 
• Availability 
• Authenticity 
• Non-Repudiation of Data 
• Ethical hacking and Industrial Espionage 
• Where to design and place effective computer and management controls 
• Case Study

Section Three: Information Management – International Standards

• Code of Practice for Information Security Management – ISO 17799 / ISO27002 
• Best Practice and Implementing Guidance and Controls For ISO 27002 
• Information Security Management Overview 
• Risk Assessment and Controls 
• Security Policy Documentation 
• Organising Information Security Management 
• IT Asset Management 
• Personnel and Human Resources

Section Four: Information Management ISO 27002

• Best Practice and Implementing Guidance and Controls For ISO 27002 
• Physical and Environmental Security 
• Operations Management and Communications 
• Access Control 
• Information Systems (Design, Development, Maintenance) 
• Incident Management 
• Business Continuity 
• Regulatory Compliance 
• Best Practice and Implementation Guidance for BS ISO/IEC 38500:2008 – IT Management 
• Case Study

Section Five: Implementing Effective Information Security Management Frameworks

• Successful steps for IT Security Management 
• Audit and Compliance for IT Resources 
• Business Process Engineering 
• Case Study