Information Security Management System (ISO 27001:2013) Specialist and Internal Auditor Certification Training

• Learning the Information Security Management System (ISO 27001:2013) at the level of auditing
• Learning information security concepts
• Providing awareness about information security incidents
• Learning the documents required for the implementation of the Information Security Management System
• Learning the audit process and application

• To have knowledge of a management system that is current and required by law,
• Having knowledge about industry experiences,
• To provide added value to people who are in the process of starting their business life, at the start of their employment,
• To provide people in business life with the opportunity to work in relevant departments and projects within the company,
• To be able to accurately determine personal precautions in private life by learning information security issues,
• To have knowledge about SWOT {Strengths, Weaknesses, Opportunities and Threats} (or SWOT) and Environment (PESTS) analyses,
• Having knowledge about related party analysis,
• Having knowledge about Process Analysis,
• Having knowledge about risk management,
• Having knowledge about document management,
• To have information about performance evaluation,
• To have knowledge about internal audit and to conduct internal audit,
• To have knowledge about the management of nonconformities,
• Having information about asset inventory,
• To have knowledge about business continuity management within the scope of information security,
• To be informed about current information security violation incidents,
• Having the competence to install an Information Security Management System (ISO27001:2013) in any organization,
• …

• Information Security Management System (ISO 27001:2013) specialist certificate,
• Information Security Management System (ISO 27001:2013) internal auditor certificate,
• Benefits from education,

a.      What is information?

b.      Elements that embody knowledge

c.      Information security components

2.      Ensuring Information Security awareness

a.       Information security principles

b.       Information security incidents

3.      ISO 27001:2013 standard articles

a.       Entrance

b.       Scope

c.       Referenced Standards and/or Documents

d.       Terms and Definitions

e.       Context (Framework) of the Organization

f.        Leadership

g.       Planning

h.       Support

i.        Operation (Operation)

j.        Performance Evaluation/Measurement

k.       Improvement

l.        APPENDIX A: Reference Control Objectives/Objectives and Controls

5.       Information security policies

6.       Organization of information security

7.       Human Resources Security

8.       Asset Management

9.       Access Control

10.     Cryptography

11.      Physical and Environmental Security

12.      Operational Safety

13.      Communication Security

14.      System Acquisition, Development and Maintenance

15.      Supplier Relations

16.      Information Security Violation Incident Management

17.      Information Security Issues of Business Continuity Management

18.     Rapport

4.     Inner control

a.       Audit types

b.      What is internal audit?

c.       Benefits of internal audit

d.       Audit process

i.          Pre-audit (planning, preparation)

ii.         Implementation (opening meeting, audit, identification and writing of nonconformities, closing meeting)

iii.        Post-audit (reporting, follow-up and closure)

e.        Auditor characteristics and recommendations

5.      Exam