Information Security Practitioner (S-ISP)

In this Information Security Officer course, you will consolidate your knowledge of information security and practice Information Security Officer tasks with realistic hands-on assignments.

First, you will learn how to incorporate information security into an organisation’s governance and culture by developing a strategic vision on information security based on the organisation’s mission, vision, strategy, compliance needs, stakeholder expectations and information security posture. Following the development of a strategic vision, you will be challenged to assess and improve information security policies, perform information security risk assessments, develop ISO 27001 implementation plans, and build a project team to carry out information security projects.

As an Information Security Officer, you may be responsible for raising information security awareness in your organisation. To improve your skills in this area, you will develop an information security awareness action plan tailored to the needs of a specific target group based on behavioural theory. In addition to the management aspects of information security, you will also grasp the fundamentals of attacker techniques. You will learn how to use open-source intelligence (OSINT) to protect information against emerging threats.

Subsequently, you will acquire the essentials of coordinating identity & access management and incident management activities. You will understand access governance and authorisation methods, and explore how to ensure accountability in identity & access management. You will grasp the organisational aspects of establishing an internal Computer Security Incident Response Team (CSIRT), immerse yourself in the incident handling process, identify key performance indicators for incident management and other information security processes, and write effective security reports.

Finally, you will put your newly acquired information security management skills to review an information security audit report and propose an actionable plan that will help the audited company to achieve ISO 27001 compliance.

Exam and Certification:

After this course, you will have the opportunity to demonstrate your knowledge through an online exam supervised by SECO-Institute. Successful candidates are awarded the prestigious S-ISP certification from SECO-Institute.

Benefits of Certification:

Demonstrable knowledge will significantly enhance your value as a professional for your organisation. Additionally, this certification by SECO-Institute ensures improved career prospects for you.

Delivery methods:

1. Tutored online/ virtual training
2. Classroom training

Objectives

By the end of this course, participants will be able to:

• Define a security strategy aligned with organisational goals;
• Develop and implement ISMS frameworks like ISO/IEC 27001;
• Strengthen leadership and awareness programmes;
• Analyse threats and perform risk assessments;
• Coordinate incident response and auditing.

Pre-requisites

Basic knowledge of information security (equivalent to S-ISF) is strongly recommended.

Audience

This course is suitable for:

• Professionals with already a foundational knowledge in information security;
• Security Officers, Consultants, Risk Managers;
• Professionals seeking practical application and leadership development.