Webinar: How to build IT-security assurance based on ISO-standards
Join this webinar to learn of IT Risk and Control Concept, which goal is to improve an organization’s information security and cybersecurity. One goal is also that in more clear and organized context decision makers can make more informed, and presumably better, decisions.
The IT Risk and Control Concept links together roles, profiles, methods, standards and processes.
In the webinar Concept’s integrations are explained from three perspectives:
- Integration of different management systems:
- IT Service Management System (ITSMS based on ISO 20000 standard)
- Information Security Management System (ISMS based on ISO 27001 standard)
- and Business Continuity Management System (BCMS based on ISO 22301 standard)
- Integration of different practices:
- Information Security Risk Management (ISRM based on ISO 27005 standard)
- Information Security Controls implementation (based on ISO 27002 standard)
- Cybersecurity Management (CSMS based on ISO 27032 standard)
- Cloud Security Management (based on ISO 27017)
- and Information Security Incident Management (ISIM based on ISO 27035 standard) to support the ISMS implementation.
- Auditor’s approach to implementations
Certifying training courses for IT-assurance:
- ISO/IEC 27001 Lead Auditor, PECB Certified
- ISO/IEC 27001 Lead Implementer, PECB Certified
- Lead Cloud Security Manager, PECB Certified
- ISO/IEC 27032 Lead Cybersecurity Manager, PECB Certified
- Certified Security Risk Manager
Haluatko saada tietoa alan kuulumisista, tulevista webinaareistamme ja asiantuntijoiden kirjoittamista blogeista? Tilaa uutiskirjeemme. Voit valita kirjeen kiinnostuksesi mukaan ja saat kirjeen kerran kuukaudessa.
Asiasanat:
