INFORMATION SECURITY ORGANIZATIONAL FOR MANAGER based on ISO 17799

Description

Information security is about 20% technology and 80% organization. Therefore, it is first a management responsibility. Before tackling the technology and the tools, it is necessary to have a global vision of what needs to be implemented to protect a company’s information and assets against security threats, sabotage, vandalism, disasters, etc..

Audience

IT Executives and IT Managers, Information Security Managers & Management

Requirements

None

Objectives

1. The objective of this seminar is to provide a framework based on the ISO 17799 Code of practice for information security management, which will allow security managers to organize and implement a global information security policy

Program

Introduction to security

- Internal and external risks

- Some real cases and their impact

- Information security stages

Business continuity management

- Organization and responsibilities

- Job descriptions

- Risk assessment and business impact analysis

- Business continuity planning

- Crisis committee

Information classification

ISO 17799

- ISO 17799 overview

- Information security architecture

- Writing security policies

Information security architecture

- Writing security policies

- Physical and environmental security

Compliance with Swiss laws

- Laws (art.321A, 328CO, art.143, 143bis,144bis, 147, 197 CP, art. 12 LPD)

- Personnel privacy

- Monitoring policies

Personnel information security awareness

- Workshop on how to establish a security awareness campaign