Information Security Foundation - Blended Training - English
In this foundation training, we provide you with practical basic knowledge in the field of information security. You will learn the basic contents and objectives of information security management according to the international standard ISO/IEC 27001 in its current edition. We provide you with the necessary knowledge to support you in setting up an information security management system (ISMS) and familiarise you with the process of audits. TÜV SÜD's ISMS qualification concept was developed together with recognised experts from business and research and guarantees the highest level of quality.
- Introduction and basic knowledge
- Basics of information security
- Management systems
- The world of norms and standards
- Overview of the ISO/IEC 27000 series of standards
- Overview of ISO/IEC 27000 ff
- Definitions
- Normative requirements
- General and sector-specific guidelines
- Fundamentals of Information Security Management Systems (ISMS)
- The ISMS and its components
- The PDCA methodology
- ISO/IEC 27001 - Minimum requirements
- Concepts and contents of information security management according to ISO/IEC 27001
- Information security measures (controls)
- Overview of information security measures according to Annex A of ISO/IEC 27001
- ISO/IEC 27002 - Guidance
- Relationship between Annex A of ISO/IEC 27001 and ISO/IEC 27002
- Overview of related standards and frameworks
- ISO 9000 series (quality management)
- ISO/IEC 20000 series (IT Service Management)
- ISO/IEC 15408 series (Common Criteria for IT Security Evaluation)
- COBIT® (IT Governance)
- Risk Management
- IT-Grundschutz Compendium of the BSI
- Certification options according to ISO/IEC 27000 ff
- Implementation recommendations for the standards update of ISO/IEC 27001 and ISO/IEC 27002
- Exam preparation with the trainer using a sample exam
- You know the requirements of ISO/IEC 27001 and can help set up an information security management system.
- You protect sensitive data and important know-how of your company.
- The Information Security Foundation certificate increases your market value.
- IT and Information Security Professionals
- IT consultants
- Employees of Critis operators
- Thematically interested persons
There are no entry requirements for participation in this training.
- In addition to the training materials for the course, each participant receives a personal copy of DIN EN ISO/IEC 27001.
- This training is conducted in German.
- At the bottom of this page, you will find the information on the online examination that applies to online events.
- In this blended training, the duration of the self-directed e-learning is based on an average completion time (approx. 4 UE, corresponding to approx. 3 hours). The actual duration of this part of the training is individual depending on the reading and processing speed as well as the number of breaks.
- In addition to the training materials for the course, each participant receives a personal copy of ISO/IEC 27001:2022 (E) and the draft of DIN EN ISO/IEC 27001:2023 (D).
- In this blended training, you will first work out important basics independently in an e-learning. The duration is based on an average processing time (approx. 4 teaching units, corresponding to approx. 3 hours). The actual duration of this training part is individual, depending on the reading and processing speed as well as the number of breaks. This self-learning module is followed by the training part under the supervision of an experienced specialist trainer, which lasts two training days.
- This training is conducted in English.
- At the end of this page you will find the information on the online examination that applies to online events.
Certificate of attendance and, if the exam is passed, Information Security Foundation certificate