DAY 1: ISMS Initiation

• Introduction to management systems
• Presentation of ISO 27001 and ISO 27002 standards
• Fundamental Principles of Information Security
• Preliminary analysis
• Project management

DAY 2: Plan

• Governance
• Risk analysis
• Statement of applicability

DAY 3: Do

• Document management program
• Controls and processes design
• Controls implementation
• Formation, awareness and communication
• Incidents management
• Operation Management

DAY 4: Check, Act and certification audit

• Monitoring
• Metrics and dashboards
• Internal audit
• Management review
• Continual improvement
• Certification audit

DAY 5: Examination

• 3-hour examination leading to certification as an ISO 27001 ISMS Lead Implementer.
• The training and examination are in the process of being certified by RABQSA, a US certification body.