LAPT
London Academy of Professional Training
Master Certificate
Level 6-7
Leadership
ISO Security Safety & Risk
ISO 27002ISC — Code of Practice for Information Security Controls
REF: SSR-ISC-27002ISC
Who Is It For
This certification is aimed at senior information security managers, compliance officers, and IT professionals with extensive experience in information governance. It is essential for those looking to strengthen their leadership capabilities in implementing and managing security controls.
Prerequisites
None
Awarding Body: LAPT — London Academy of Professional Training
Curriculum Overview
1
Leadership in Information Security
2
Security Control Evaluation
3
Policy Development and Implementation
4
Risk Management Strategies
Fundamentals of Risk Management in Information Security
6 classes
1.1 Define Key Concepts in Risk Management
1.2 Identify Common Security Risks in Information Systems
1.3 Evaluate the Impact of Risks on Information Security
1.4 Analyze Risk Assessment Methodologies
1.5 Develop a Risk Mitigation Plan
1.6 Implement Continuous Risk Monitoring Strategies
Identifying and Assessing Information Security Risks
6 classes
2.1 Define Information Security Risks in Your Organisation
2.2 Identify Common Vulnerabilities and Threats
2.3 Evaluate the Impact of Identified Risks
2.4 Assess the Likelihood of Information Security Incidents
2.5 Prioritise Risks Based on Impact and Likelihood
2.6 Develop a Risk Assessment Report for Stakeholders
Developing Risk Mitigation Strategies
6 classes
3.1 Identify Key Risks in Information Security
3.2 Analyze the Impact of Risks on Business Operations
3.3 Develop Risk Acceptance Criteria for Stakeholders
3.4 Explore Preventive Measures for Identified Risks
3.5 Formulate a Risk Mitigation Plan Based on Best Practices
3.6 Evaluate and Adjust Mitigation Strategies Regularly
Monitoring and Reviewing Risk Management Practices
6 classes
4.1 Identify Key Metrics for Risk Management Monitoring
4.2 Establish Reporting Frameworks for Risk Assessment
4.3 Analyze Historical Data to Improve Risk Strategies
4.4 Conduct Regular Audits of Risk Management Practices
4.5 Utilize Feedback Loops for Continuous Improvement
4.6 Develop an Action Plan for Addressing Identified Risks
Integrating Risk Management with Business Processes
5
ISO 27002 Framework Application
Foundations of ISO 27002: Understanding Information Security Controls
6 classes
1.1 Define Key Concepts in Information Security Controls
1.2 Explain the Importance of ISO 27002 in Information Security Management
1.3 Identify the Major Sections and Structure of ISO 27002
1.4 Assess the Role of Leadership in Implementing Information Security Controls
1.5 Analyze Real-World Applications of ISO 27002 Controls
1.6 Develop a Plan for Integrating ISO 27002 in Organizational Practices
Key Controls and Their Implementation: A Deep Dive into ISO 27002
6 classes
2.1 Understand the Structure of ISO 27002 Controls
2.2 Identify Key Information Security Controls in ISO 27002
2.3 Evaluate Control Objectives and Their Importance
2.4 Analyze Implementation Strategies for ISO 27002 Controls
2.5 Measure the Effectiveness of Information Security Controls
2.6 Develop a Continuous Improvement Plan for ISO 27002 Compliance
Risk Assessment and Management Within the ISO 27002 Framework
6 classes
3.1 Define Key Concepts in Risk Assessment and Management
3.2 Identify Risks Relevant to the ISO 27002 Framework
3.3 Evaluate the Impact and Likelihood of Identified Risks
3.4 Develop Risk Treatment Plans Aligned with ISO 27002
3.5 Implement Risk Management Strategies in Practice
3.6 Review and Monitor Risk Management Outcomes
Monitoring and Reviewing Controls: Ensuring Compliance and Effectiveness
6 classes
4.1 Identify Key Monitoring Metrics for Information Security Controls
4.2 Implement Effective Monitoring Techniques for ISO 27002 Compliance
4.3 Analyze Data from Monitoring to Evaluate Control Effectiveness
4.4 Develop a Review Schedule for Information Security Controls
4.5 Communicate Findings from Monitoring and Reviews to Stakeholders
4.6 Adjust and Optimize Controls Based on Monitoring Insights
Continuous Improvement and Future Trends in ISO 27002 Compliance
6 classes
5.1 Identify Key Elements of Continuous Improvement in ISO 27002
5.2 Analyze Current Compliance Gaps Against ISO 27002 Standards
5.3 Develop Action Plans for Addressing Compliance Gaps
5.4 Implement Measurement and Monitoring Techniques for ISO 27002
5.5 Explore Emerging Trends Impacting ISO 27002 Compliance
5.6 Create a Roadmap for Sustaining Continuous Improvement in Information Security
6
Information Security Principles
Understanding Information Security Fundamentals
6 classes
1.1 Define Key Information Security Concepts
1.2 Identify Common Information Security Threats
1.3 Explore the Importance of Confidentiality, Integrity, and Availability
1.4 Recognize the Role of Policies and Procedures in Information Security
1.5 Examine Risk Management Principles in Information Security
1.6 Apply Information Security Best Practices to Case Studies
Risk Management and Assessment in Information Security
6 classes
2.1 Identify Key Concepts in Risk Management
2.2 Analyze Common Threats to Information Security
2.3 Evaluate Risk Assessment Methodologies
2.4 Determine Risk Levels and Impacts
2.5 Develop Risk Mitigation Strategies
2.6 Implement Continuous Risk Monitoring Practices
Implementing Information Security Policies and Procedures
6 classes
3.1 Analyze Current Information Security Policies
3.2 Identify Key Information Security Procedures
3.3 Develop Tailored Information Security Policies
3.4 Communicate Information Security Policies Effectively
3.5 Implement Information Security Procedures in Practice
3.6 Evaluate and Revise Information Security Policies Regularly
Information Security Controls and Best Practices
6 classes
4.1 Identify Key Information Security Controls
4.2 Evaluate Best Practices for Risk Management
4.3 Implement Access Control Mechanisms
4.4 Assess Data Protection Strategies
4.5 Monitor and Review Security Performance
4.6 Develop a Response Plan for Security Incidents
Compliance and Monitoring in Information Security Management
6 classes
5.1 Recognize the Importance of Compliance in Information Security
5.2 Identify Key Information Security Standards and Regulations
5.3 Assess Current Compliance Levels Against ISO 27002ISC
5.4 Implement Effective Monitoring Strategies for Information Security
5.5 Evaluate Compliance Risks and Develop Mitigation Plans
5.6 Report on Compliance Findings and Continuous Improvement in Security Practices
Assessment Breakdown
50%
Theory
35%
Practical
15%
Project
Passing Mark: 325 / 500 (65%)
Methods: Written Examination, Practical Assignment, Portfolio Assessment
How to Enrol
Website: lapt.org
Email: info@lapt.org
Phone: +44 7513 283044
Address: 85 Great Portland Street, W1W 7LT, United Kingdom
Hours: Monday – Friday, 9AM – 5PM