|
LAPT
London Academy of Professional Training
Certificate
ISO 27005 — Information Security Risk Management
ISO Certification Programme
REF: IIT-INS-27005
• ISO IT & Related Technologies
• Information Security
|
| 6Subjects | 10Chapters | 30Classes | 430Total Marks | 60%Pass Mark | LifetimeValidity |
At a Glance
| Reference | IIT-INS-27005 |
| Award | Certificate |
| Assessment | 430 marks — 258 to pass (60%) |
| Prerequisites | None |
| Validity | Lifetime |
| Awarding Body | LAPT — London Academy of Professional Training |
Curriculum
| 1 | Communication and Reporting | 0 chapters 65 marks |
| 2 | Leadership in Risk Management | 0 chapters 65 marks |
| 3 | Legal and Regulatory Compliance | 0 chapters 45 marks |
| 4 | Risk Assessment Techniques | 5 chapters 105 marks |
• 1 Overview of Information Security Risk Management Frameworks
• 2 Identifying and Categorizing Assets in the Information Security Context
• 3 Threat and Vulnerability Assessment Methodologies
• 4 Risk Analysis Techniques: Qualitative vs. Quantitative Approaches
• 5 Reporting and Communicating Risk Assessment Results
| 5 | Risk Management Frameworks | 5 chapters · 30 classes 85 marks |
• 1 Fundamentals of Risk Management in Information Security — 6 classes
› 1.1 Define Key Terms in Information Security Risk Management
› 1.2 Identify the Components of a Risk Management Framework
› 1.3 Analyze the Role of Stakeholders in Risk Management
› 1.4 Evaluate Common Risk Assessment Techniques and Tools
› 1.5 Develop a Risk Treatment Plan for an Organization
› 1.6 Implement Continuous Risk Monitoring and Review Practices
• 2 ISO 27005 Overview and Framework Structure — 6 classes
› 2.1 Explore the Key Principles of ISO 27005
› 2.2 Identify the Components of the ISO 27005 Framework
› 2.3 Analyze the Risk Management Process in ISO 27005
› 2.4 Evaluate the Importance of Context in Risk Assessment
› 2.5 Apply Risk Treatment Options in ISO 27005
› 2.6 Develop a Risk Management Plan Using ISO 27005 Guidelines
• 3 Risk Assessment Techniques and Tools — 6 classes
› 3.1 Identify Key Risk Assessment Techniques Used in ISO 27005
› 3.2 Analyze Qualitative vs Quantitative Risk Assessment Methods
› 3.3 Evaluate the Role of Risk Matrices in Decision Making
› 3.4 Apply the Bowtie Method to Visualize Risk Scenarios
› 3.5 Utilize Risk Assessment Tools in Practical Case Studies
› 3.6 Develop a Comprehensive Risk Assessment Report Template
• 4 Risk Treatment and Response Strategies — 6 classes
› 4.1 Identify Key Risk Treatment Options
› 4.2 Analyze Effectiveness of Response Strategies
› 4.3 Evaluate Cost-Benefit of Risk Treatments
› 4.4 Develop Risk Acceptance Criteria
› 4.5 Formulate a Risk Treatment Plan
› 4.6 Implement and Monitor Risk Response Strategies
• 5 Monitoring, Reviewing, and Continuous Improvement of Risk Management — 6 classes
› 5.1 Assess Current Risk Management Practices
› 5.2 Identify Key Performance Indicators for Monitoring
› 5.3 Implement Effective Risk Review Processes
› 5.4 Analyze Data for Continuous Improvement
› 5.5 Develop Action Plans Based on Review Findings
› 5.6 Foster a Culture of Continuous Risk Management Improvement
| 6 | Risk Treatment Strategies | 0 chapters 65 marks |
| LAPT — 85 Great Portland Street, W1W 7LT, London, United Kingdom info@lapt.org • +44 7513 283044 • lapt.org |
UKPRN 10067351 • Company 4984798 Curriculum current at the date of issue. |