Day 1 Introduction to ISO/IEC 27001 and initiation of an ISMS implementation

> Training course objectives and structure
> Standards and regulatory frameworks
> Information security management system based on
> ISO/IEC 27001
> Fundamental concepts and principles of information
security
> Initiation of the ISMS implementation
> Understanding the organization and its context
> ISMS scope

Day 2 Implementation plan of an ISMS
> Leadership and project approval
> Organizational structure
> Analysis of the existing system
> Information security policy
> Risk management
> Statement of Applicability

Day 3 Implementation of an ISMS
> Selection and design of controls
> Implementation of controls
> Management of documented information
> Trends and technologies
> Communication
> Competence and awareness
> Management of security operations

Day 4 ISMS monitoring, continual improvement, and preparation for the certification audit
> Monitoring, measurement, analysis, and evaluation
> Internal audit
> Management review
> Treatment of nonconformities
> Continual improvement
> Preparation for the certification audit
> Closing of the training course
Day 5 Certification Exam