The ISO/IEC 27001 Transition training course enables participants to thoroughly understand the differences between ISO/IEC 27001:2013 and ISO/IEC 27001:2022. In addition, participants will acquire knowledge on the new concepts presented by ISO/IEC 27001:2022. The new version of ISO/IEC 27001 has been recently published and is now aligned with the new version of ISO/IEC 27002, which was published in February, 2022. The major changes between ISO/IEC 27001:2022 and ISO/IEC 27001:2013 are noticed in the information security controls of Annex A, whereas a few other minor changes are present in the clauses of the standard too. Furthermore, the title of ISO/IEC 27001:2022 [...]

Course Description In recent years, there has been a growing recognition within organizations that they need a designated individual who has the necessary skills to effectively address information security responsibilities. Consequently, the role of the CISO has emerged as an executive-level position, obtaining the information security responsibilities that previously were held by personnel within the IT Department. Now, organizations have a dedicated professional focused on overseeing and managing all aspects of information security, ensuring a more comprehensive and specialized approach to safeguarding information and information assets.  By attending the PECB CISO training course, you will gain the necessary expertise to [...]

ISO 22301 Lead Auditor training is designed to enable attendants to audit a business continuity management system (BCMS) based on the requirements of ISO 22301. Given the increasing number of disruptions and the unpredictability of disasters of any kind (natural, occupational, information security), organizations nowadays are aiming at getting certified against ISO 22301 to show commitment toward business continuity and ensure that disruptive incidents are detected and properly addressed, thus the management system is continually improved. By becoming a PECB certified auditor, you will achieve a formal and independent recognition of your personal competences, and you qualify yourself to conduct [...]

The course is aimed at all levels within the organization who want to attain an overview of the elements of the ISO/IEC 27001 & 27002 standards and the certification process. It is envisaged the delegates would normally have at least a basic understanding of the principles of IT Security Management and a basic IT Service Management in general. Who should attend? Members of any IT organization or IT dependent organization who play a role in quality IT management or have an interest in the ISO/IEC 27001 & 27002 standards. What should you expect? This course does not provide a professional [...]

Fifalde Consulting Inc.’s launch of a 2-day training for the new ISO/IEC 27001 certificate provides organizations and individuals with the essential understanding of ISO/IEC 27001 and prepares them for the certification examination. Who should attend? Everyone in the organization who is processing information. The module is also suitable for entrepreneurs of small independent businesses for whom some basic knowledge of information security is necessary. This module can be a good start for new information security professionals. What should you expect? Introduction of the hi-level concepts of the Information Security based on ISO/IEC 27001 Understanding of the ISO/IEC 27001 terminology, structure [...]

Information security is becoming increasingly important. Globalization of the economy leads to a growing exchange of information between organizations (their employees, customers and suppliers) and a growing use of networks, such as the internal company network, connection with the networks of other companies and the Internet. Other relevant trends include: (international) standards and certification in the field of information security continuing computerization of (IT) management development of automated security tools remote control outsourcing of management tasks compliance Furthermore, activities of many companies now rely on ICT, and information has become a valuable asset. Protection of information is crucial for the [...]

Fifalde Consulting Inc.’s launch of a 2-day training for the new ISO/IEC 27002 certificate provides organizations and individuals with the essential understanding of ISO/IEC 27002 and prepares them for the certification examination. Who should attend? Everyone in the organization who is processing information. The module is also suitable for entrepreneurs of small independent businesses for whom some basic knowledge of information security is necessary. This module can be a good start for new information security professionals. What should you expect? Introduction of the hi-level concepts of the Information Security based on ISO/IEC 27002 Understanding of the ISO/IEC 27002 terminology, structure [...]

The most valuable asset any entity possesses is information. Technology plays a key role in the management and protection of information from the time it is created up to the moment it is destroyed. Using COBIT 5 ensures that implementation of the NIST framework will be driven by management and treated as an investment, supported by a business case, with transparent monitoring of the benefits (ROI). Ultimately management must take ownership and engage with service providers and experts. COBIT5 enables a dialogue between management and security experts based on easy to understand security management practices. The key guiding principles of [...]

ISO/IEC 27001 Lead Auditor training enables you to develop the necessary expertise to perform an Information Security Management System (ISMS) audit by applying widely recognized audit principles, procedures and techniques. During this training course, you will acquire the necessary knowledge and skills to plan and carry out internal and external audits in compliance with ISO 19011 and ISO/IEC 17021-1 certification process. Based on practical exercises, you will be able to master audit techniques and become competent to manage an audit program, audit team, communication with customers, and conflict resolution. After acquiring the necessary expertise to perform this audit, you can [...]

IT Security planning is essential to any organization. The development, appreciation, and expression of the IT security strategy and plan are the single most important factors in setting the security tone for an organization. If you try to achieve a level of security that is too ambitious and inappropriate for the organization, you will not retain support from management. They will soon see that you are pumping money and head-count where it is not effective. Yet unless you take a high-level, whole organization approach, you will never obtain the backing or the funding to enforce any policy you write. The [...]