The ISO/IEC 27005:2022 Lead Risk Manager training course enables participants to acquire the necessary competencies to assist organizations in establishing, managing, and improving an information security risk management (ISRM) program based on the guidelines of ISO/IEC 27005:2022.
Apart from introducing the activities required for establishing an information security risk management program, the training course also elaborates on the best methods and practices related to information security risk management.
Learning objectives
By successfully completing this training course, you will be able to:
Explain the risk management concepts and principles based on ISO/IEC 27005:2022 and ISO 31000
Establish, maintain, and continually improve an information security risk management framework based on the guidelines of ISO/IEC 27005:2022 and best practices
Apply information security risk management processes based on the guidelines of ISO/IEC 27005:2022
Plan and establish risk communication and consultation activities
Record, report, monitor, and review the information security risk management process and framework
Program
Day 1: Introduction to ISO/IEC 27005:2022 and information security risk management
Day 2: Risk identification, analysis, evaluation, and treatment based on ISO/IEC 27005
Day 3: Information security risk communication and consultation, recording and reporting, and monitoring and review
Day 4: Risk assessment methods
Day 5: Certification exam remotely