DNV - _Course Information Security Governance

A security risk is often followed by a set of technical measures. Whether or not the measure is effective, does not only depend on the quality of the technique, but to a large extent on the quality of implementation in the organisation. Also, the level of maturity of the organisation with regard to information security says a lot about whether or not the chosen measure, now and in the future, will be able to offer the protection it was designed for.

In this 2 days course we will examine and explain Information Security Governance as a framework to be able to implement lasting information security measures effectively and efficiently.

Programme

introduction to the concept of Information Security Governance;
setting up an information security policy;
responsibilities within the organisation;
managing security, a methodology;
known models/best practices: Code for Information Security/ ISO17799, ITIL Security Management, CobiT, IT Service CMM;
setting up of a Computer Security Incident Response Team (CSIRT).

During the course you will gain insight into:

aspects and getting started with Information Security Governance;
best practices: what it means for your organisation.

Target audience
IT-architects, policy makers, managers, security managers: anyone involved in creating a structure or framework for an efficient implementation of security measures in the organisation.

Prerequisites
Knowledge of an IT organisation, general knowledge of information security.

Contact