Preparing Your Organization for ISO 27001:2013 Compliance/Certification

By Mike Woolard
ISO/IEC 27001 is an international standard for information security. Companies around the world implement the standard to demonstrate to customers that they meet a strong level of security. This course will guide you through the process of certification.
Play course overview
Course info
Rating
(15)
Level
Intermediate
Updated
Jan 10, 2020
Duration
4h 13m
Table of contents
Course Overview
Course Overview 2m
ISO/IEC 27001 Fundamentals of the Standard
Developing the ISMS Manual - Leadership Commitment 3m Developing the ISMS Manual - Requirements of Interested Parties 1m Developing the ISMS Manual - Context of Organization 3m What Is the Information Security Management System? 4m Developing the ISMS Manual - Scope 4m Introduction 11m
A.8 Asset Management
Responsibilities of Asset Owner 4m Asset Register 2m Acceptable Use Policy 1m Information Classification and Handling 4m
Risk Management
Risk Assessment - Risk Criteria and Acceptance 2m Risk Assessment - Risk Treatment Process 5m Risk Assessment - Define the Process 5m Continuous Improvement 2m Statement of Applicability 2m
A.5 Information Security Policies
Information Security Policy 3m Objectives - Establishing 3m
A.6 Organization of Information Security
Internal Organization 5m Roles and Responsibilities 3m Mobile Device and Teleworking 5m
A.7 Human Resource Security
Termination and Change of Employment 6m Prior to Employment 5m During Employment 2m
A.9 Access Control
Password Policies 4m Access Management 5m System and Application Access 3m Business Requirements 4m User Responsibilities 1m
A.10 Cryptography
Key Management 5m Use of Controls 5m
A.11 Physical and Environmental Security
User Responsibilities 8m Equipment Care 3m Access Control Systems 2m Secure Areas 4m
A.12 Operations Security
Operational Procedures and Responsibilities 3m Capacity Management 1m Operational Procedures - Environment Separation 1m System and Data Protection 4m Technical Vulnerability Management 5m Change Management 3m Operational Procedures - Logging and Monitoring 2m
A.13 Communications Security
Network Services Security 1m Information Transfer 2m Non-disclosure Agreements 7m Network Controls 3m Network Segregation 2m Electronic Messaging 1m
A.14 System Acquisition, Development and Maintenance
Outsourced Development 4m Testing 3m System Change Control 2m Public Networks 2m Development Process 3m Information Security Requirements 4m Test Data 7m
A.15 Supplier Relationships
Supplier Agreements 3m Supplier Reviews 5m Security in Supplier Relationships 3m Service Level Agreements 2m
A.16 Information Security Incident Management
Response 3m What Is an Incident? 3m Reporting 2m Lessons Learned 5m
A.17 Information Security Aspects of Business Continuity Management
Identifying 1m Maintain and Test 1m Planning 2m Embedding Information Security in Business Continuity 2m Redundancies 5m
A.18 Compliance
Identifying Requirements 3m Protection of Intellectual Property Rights 2m ISMS Compliance 1m Listing and Protecting Records 2m Information Security Review 5m
Certification Preparations
Internal Audits 2m Management Review 5m Communication Plan 3m Employee Awareness 1m
Description
Course info
Rating
(15)
Level
Intermediate
Updated
Jan 10, 2020
Duration
4h 13m
Description

27001 is one of the top globally recognized information security standards in the world. In this course, Preparing Your Organization for ISO 27001:2013 Compliance/Certification, you will learn what it takes to prepare your organization for the certification process. First, you will talk through the fundamental pieces that must be in place to start the process. Next, you will go through each domain in the Annex A to understand what an auditor is looking for from your organization if you choose to implement that control. Finally, you will discover the last bits around certification preparations as well as the parts that are ongoing to remain in compliance. When you have finished with this course, you will understand the process required to become certified.

About the author
Mike Woolard
About the author

Mike is an information security manager who has worked in the IT field for 17+ years. The focus of Mike's career now centers on pentesting and risk assessments. An active member in the infosec community and attends or speaks at various conferences.

More from the author
Web Application Penetration Testing Fundamentals
Intermediate
2h 37m
Jun 13, 2017
Getting Started with OWASP Zed Attack Proxy (ZAP) for Web Application Penetration Testing
Intermediate
1h 46m
Feb 16, 2017
Section Introduction Transcripts
Section Introduction Transcripts

Course Overview
[Autogenerated] Hi, everyone. My name is Mike Ward and welcome to my course in preparing your organization for Isil 27,000 won 2013 Compliance and certification. I am a risk in compliance manager at a global organization with ice 0 27,000 won implemented across offices around the world as well as a certified iess mislead implementer 27,000 won is with the top globally recognised information security standards in the world. And with new data privacy legislation being passed daily, it will continue to gain popularity as organizations look for how to be in conformity with new laws and best practices. This course is not a regurgitation of the standard, but rather a compliment to it and walks you through an overview of the process to be certified. It then steps through each of the clauses and controls in the annex of the standard and gives you guidance on what the order is looking for so you can focus on what is important and streamline your preparation process. Some of the major topics that will cover include developing the awesomest manual, conducting risk assessments in your business, setting a scope in statement of applicability, then we'll walk through all 14 security control clauses in touch on the 114 controls in the annex. By the end of this course, you should have a better understanding of the process to be certified, and the work involved in getting their certification is not an overnight process and depending on the size of the organization and scope involved, could take weeks, months or even a year to prepare. Sit back, grab a copy of a standard and get ready to fill your notebook with an amazing advice you will receive in this course preparing your organization for Isil 27,000 won 2013 compliance and certification here at plural site.

You're the smartest person in the room

PROVE IT

Your team won't just close the skills gap

THEY'LL HURDLE IT