Security Courses > Writing Security Policy to ISO17799 / 27001 Training Course

This course examines how to create a flexible security policy that can change with requirements and maintain its operational health with mechanisms to combat the human weaknesses of the security process.

Delegates will take away working documents that they can apply to their organisation.

These include:

• An executive briefing on best practice security policy
• Their own design for a policy template
• Policies for more than 20 main areas of security that will work in their company
• An implementation plan for their company

A good understanding of Information Security issues.

Topics covered on the 2 day Writing Security Policy to ISO17799 / 27001 course

ISO17799 / 27001 and IT Security

Defining a Security Policy

Corporate Information Security Policy

Specific policies including

• Information classification
• Access control
• Operations
• Incident management
• Physical security
• Human resources
• Third-party access
• Business continuity management

Standards

• Industry best practice
• Experience
• Business drivers
• Internal testing

Procedures

• Incident Reporting
• Incident Management
• User ID addition / removal
• Server backup

Document Structure

• Suggested headings for internal policies

Other Standards

• Sources of Information
• Authorisation, Implementation and Operation of Security Policies

   (excl.VAT)