Course: Information Security Management

The Course Content

Day One

Information Security Management - An Overview

• IT Risk Management
  • Categorising Physical and Electronic Risk
• IT and Networks
• Computer Systems Design
• Legal and Regulatory Considerations
• Information, Business and Risk – Case Study

Day Two

Information Security Management

• Ensuring Information Security
• Confidentiality
• Integrity
• Availability
• Authenticity
• Non Repudiation of Data
• Ethical hacking and Industrial Espionage
• Where to design and place effective computer and management controls
• Case Study

Day Three

Information Management – International Standards

• Code or Practice for Information Security Management – ISO 17799 / ISO27002
• Best Practice and Implementing Guidance and Controls For ISO27002
• Information Security Management Overview
• Risk Assessment and Controls
• Security Policy Documentation
• Organising Information Security Management
• IT Asset Management
• Personnel and Human Resources

Day Four

Information Management ISO27002

• Best Practice and Implementing Guidance and Controls For ISO27002
• Physical and Environmental Security
• Operations Management and Communications
• Access Control
• Information Systems (Design, Development, Maintenance)
• Incident Management
• Business Continuity
• Regulatory Compliance
• Best Practice and Implementation Guidance for BS ISO/IEC 38500:2008 – IT Management
• Case Study

Day Five

Implementing Effective Information Security Management Frameworks

• Successful steps for IT Security Management
• Audit and Compliance for IT Resources
• Business Process Engineering
• Case Study

The Scandinavian Academy for Training and Development adopts the latest scientific and professional methodologies in training and human resource development, aiming to enhance the efficiency of individuals and organizations. Training programs are delivered through a comprehensive approach that includes:

• Theoretical lectures supported by PowerPoint presentations and visual materials (videos and short films).
• Scientific evaluation of participants before and after the program to measure progress and knowledge acquisition.
• Brainstorming sessions and practical role-playing to simulate real-life scenarios.
• Case studies tailored to align with the training content and participants work nature.
• Assessment tests conducted at the end of the program to evaluate the achievement of training objectives.

Each participant receives the training material (both theoretical and practical) in printed form and saved on a CD or flash drive. Detailed reports, including attendance records, final results, and overall program evaluations, are also provided.

Training materials are prepared professionally by a team of experts and specialists in various fields. At the end of the program, participants are awarded a professional attendance certificate, signed and accredited by the Scandinavian Academy for Training and Development.

Program Timings:

• 9:00 AM to 2:00 PM in Arab cities.
• 10:00 AM to 3:00 PM in European and Asian cities.

The program includes:

• A daily buffet provided during the sessions to ensure participants comfort.

The Course

Information is the lifeblood to all organisations, without with it would be severally impacted and ultimately cease to function. Information is knowledge and knowledge is power. With an ever changing climate of technology and threats (both technical and human), the need for trained security personnel to protect our information becomes increasingly critical evolutionary task.

Information is at risk from many sources, legal, electronic, physical, internal and external to mention a few. It is paramount that security and related management personnel have an understanding of the risks, controls and countermeasures that are available to secure information and technology within an effective management framework. Furthermore utilising countermeasures, best practice and management techniques will mitigate electronic and physical risks and enhance protection to an organisation.

The Goals

On successful completion of the seminar, delegates will be able to have:

• Knowledge of the concepts relating to information security management (confidentiality, integrity, availability, vulnerability, threats, risks, counter measures, etc).
• Understanding of current legislation and regulations which impact upon information security management.
• Awareness of current national and international standards such as ISO 27002, frameworks and organisations which facilitate the management of information security.
• Understanding of the current business and common technical environments in which information security management has to operate.
• Knowledge of the categorisation, operation and effectiveness of controls of different types and characteristics.

The Delegates

The seminar has been designed for individuals responsible for Risk Management, IT Security and IT Security Auditing, Technical IT Management and those with involvement of systems integration and corporate IT development. Financial controllers with a technical interest may also benefit from the seminar.

The Process

Participants will gain detailed knowledge by active participation in seminars, group discussions and real life case studies.

Delivery will be by presentation, group syndicate investigations, training DVD and interactive seminars.

The Benefits

The seminar will provide delegates with an understanding of IT Security Management and the commercial challenges which are faced on a daily basis, and how these are exploited. Furthermore, delegates will be able to appreciate placement of security controls within IT Systems and Networks and how these can be effectively implemented and audited, to ensure full system reliability, scalability and security. At the conclusion of the seminar delegates will be able to appraise risk, recommend security controls and develop an appropriate IT Security Management Approach applicable to their organisation culture and ethos.

The Results

Organisations will be better educated in relation to risks and will be able to adopt justified procedures for the security of their systems, within an appropriate Information Security Management Framework. This in turn will allow executives to place good reliance on controls which safeguard information and business processes. Being able to adapt current best practice in accordance with International Standards will ensure that companies benefit from leading solutions.

The Scandinavian Academy for Training and Development is committed to hosting all training programs in dedicated and well-equipped hotel facilities specifically designed for conducting and delivering training sessions, unless explicitly stated otherwise on our website. Participants will be notified of the program venue within 7 to 21 days prior to the programs start date, based on the Academys assessment and the programs circumstances. The Scandinavian Academy for Training and Development emphasizes that it holds no responsibility for any force majeure events that may prevent the program from being held at the designated venue. Nevertheless, the Scandinavian Academy for Training and Development will make every effort to provide suitable alternatives and extend the necessary support to participants in the event of a venue change due to unforeseen circumstances.