ISO/IEC 27005 - Information Security Risk Management
About the course
ISO/IEC 27005 can be really helpful for organizations that seek to meet the requirements of ISO/IEC 27001 regarding risk management. By establishing a risk management process based on ISO/IEC 27005, organizations increase the effectiveness of their ISMS, address information security risks, and establish appropriate information security risk management practices.
ISO/IEC 27005 Foundation
ISO/IEC 27005 Risk Manager
ISO/IEC 27005 Lead Risk Manager
https://pecb.com/en/education-and-certification-for-individuals/iso-iec-27005
ISO/IEC 27005 - Risk Foundation
Learning Objectives
Learning Objectives
Learning Objectives
- Describe the main risk management concepts, principles, and definitions
- Interpret the guidelines of ISO/IEC 27005 for managing information security risks
- Identify approaches, methods, and techniques used for the implementation and management of an information security risk management program
Who should attend?
Learning Objectives
Learning Objectives
- Risk management professionals
- Professionals wishing to get acquainted with the guidelines of ISO/IEC 27005 for information security risk management.
- Personnel tasked with managing information security risks in their area of responsibility.
- Individuals interested in pursuing a career in information security risk management.
Course Agenda
Learning Objectives
Course Agenda
- Day 1: Introduction to ISO/IEC 27005 and fundamental concepts of information security risk management.
- Day 2: Information security risk management and certification exam.
- Training Days= 2
- CPD Certification (Credits)=14
- Exam Duration - 1 Hour
- Retake Exam: Yes
Exam
Learning Objectives
Course Agenda
- Domain 1: Fundamental concepts of information security risk management.
- Domain 2: Information security risk management approaches and processes.
ISO/IEC 27005 Risk Manager
Learning Objectives
Learning Objectives
Learning Objectives
- Explain the risk management concepts and principles outlined by ISO/IEC 27005 and ISO 31000.
- Establish, maintain, and improve an information security risk management framework based on the guidelines of ISO/IEC 27005.
- Apply information security risk management processes based on the guidelines of ISO/IEC 27005.
- Plan and establish risk communication and consultation activities.
Who should attend?
Learning Objectives
Learning Objectives
- Managers or consultants involved in or responsible for information security in an organization.
- Individuals responsible for managing information security risks.
- Members of information security teams, IT professionals, and privacy officers.
- Individuals responsible for maintaining conformity with the information security requirements of ISO/
- Managers or consultants involved in or responsible for information security in an organization.
- Individuals responsible for managing information security risks.
- Members of information security teams, IT professionals, and privacy officers.
- Individuals responsible for maintaining conformity with the information security requirements of ISO/IEC 27001 in an organization.
- Project managers, consultants, or expert advisers seeking to master the management of information security risks.
Course Agenda
Learning Objectives
Course Agenda
- Day 1: Introduction to ISO/IEC 27005 and risk management.
- Day 2: Risk assessment, risk treatment, and risk communication and consultation based on ISO/IEC 27005
- Day 3: Risk recording and reporting, monitoring and review, and risk assessment methods.
- Training Days= 3
- CPD Certification (Credits)=21
- Exam Duration- 2 Hours
- Retake Exam: Yes
Exam
Learning Objectives
Course Agenda
- Domain 1: Fundamental principles and concepts of information security risk management.
- Domain 2: Implementation of an information security risk management program.
- Domain 3: Information security risk management framework and processes based on ISO/IEC 27005.
- Domain 4: Other information security risk assessment methods.
ISO/IEC 27005 Lead Risk Manager
Learning Objectives
Learning Objectives
Learning Objectives
- Explain the risk management concepts and principles based on ISO/IEC 27005 and ISO 31000.
- Establish, maintain, and continually improve an information security risk management framework based on the guidelines of ISO/IEC 27005 and best practices.
- Apply information security risk management processes based on the guidelines of ISO/IEC 27005.
- P
- Explain the risk management concepts and principles based on ISO/IEC 27005 and ISO 31000.
- Establish, maintain, and continually improve an information security risk management framework based on the guidelines of ISO/IEC 27005 and best practices.
- Apply information security risk management processes based on the guidelines of ISO/IEC 27005.
- Plan and establish risk communication and consultation activities.
- Record, report, monitor, and review the information security risk management process and framework.
Who should attend?
Learning Objectives
Learning Objectives
- Managers or consultants involved in or responsible for information security in an organization.
- Individuals responsible for managing information security risks, such as ISMS professionals and risk owners.
- Members of information security teams, IT professionals, and privacy officers.
- Individuals responsible for maintaining conformity with th
- Managers or consultants involved in or responsible for information security in an organization.
- Individuals responsible for managing information security risks, such as ISMS professionals and risk owners.
- Members of information security teams, IT professionals, and privacy officers.
- Individuals responsible for maintaining conformity with the information security requirements of ISO/IEC 27001 in an organization.
- Project managers, consultants, or expert advisers seeking to master the management of information security risks.
Course Agenda
Learning Objectives
Course Agenda
- Day 1: Introduction to ISO/IEC 27005 and information security risk management.
- Day 2: Risk identification, analysis, evaluation, and treatment based on ISO/IEC 27005.
- Day 3: Information security risk communication and consultation, recording and reporting, and monitoring and review.
- Day 4: Risk assessment methods.
- Day 5: Certification exam.
- T
- Day 1: Introduction to ISO/IEC 27005 and information security risk management.
- Day 2: Risk identification, analysis, evaluation, and treatment based on ISO/IEC 27005.
- Day 3: Information security risk communication and consultation, recording and reporting, and monitoring and review.
- Day 4: Risk assessment methods.
- Day 5: Certification exam.
- Training Days= 5
- CPD Certification (Credits)=31
- Exam Duration- 3 Hour
- Retake Exam: Yes
Exam
Learning Objectives
Course Agenda
- Domain 1: Fundamental principles and concepts of information security risk management.
- Domain 2: Implementation of an information security risk management program.
- Domain 3: Information security risk assessment.
- Domain 4: Information security risk treatment.
- Domain 5: Information security risk communication, monitoring, and improvement.
- Domain 6: Information security risk assessment methodologies.
